Incorrect Implementation of Authentication Algorithm
CWE-303
The requirements for the product dictate the use of an established authentication algorithm, but the implementation of the algorithm is incorrect.
We track 67 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 8.7. 2 have been exploited in real attacks.
Latest Incorrect Implementation of Authentication Algorithm vulnerabilities
- 7.5 High severity
PowerProtect Data Domain with Data Domain…: Incorrect Implementation of Authentication Algorithm
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an incorrect Implem
- 8.1 High severity
esphome: Incorrect Implementation of Authentication Algorithm
ESPHome is a system to control microcontrollers remotely through Home Automation systems. In version 2025.8.0 in the ESP-IDF platform, ESPHome's web_server authentication check can pass incorrectly when the client-supplied base64-encoded Authorization value is
- 7.3 High severity
immich: Incorrect Implementation of Authentication Algorithm
immich is a high performance self-hosted photo and video management solution. Prior to 1.132.0, immich is vulnerable to account hijacking through oauth2, because the state parameter is not being checked. The oauth2 state parameter is similar to a csrf token, s
- 7.5 High severity
glpi: Incorrect Implementation of Authentication Algorithm
GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to version 10.0.18, if a "Mail servers" authentication provider is configured to use an Oauth connection provided by the OauthIMAP plugin, anyone can connect to GLPI u
- 7.8 High severity
elabftw: Authentication Bypass Using an Alternate Path or Channel
eLabFTW is an open source electronic lab notebook for research labs. A vulnerability has been found starting in version 4.6.0 and prior to version 5.1.0 that allows an attacker to bypass eLabFTW's built-in multifactor authentication mechanism. An attacker who
- 9.8 Critical severity
M-Files Server: Incorrect Implementation of Authentication Algorithm
Authentication bypass condition in LDAP authentication in M-Files server versions before 24.11 supported usage of OpenLDAP configurations that allowed user authentication without a password when the LDAP server itself had the vulnerable configuration.
- 8.1 High severity
Eclipse EDC Connector: Improper Authentication
In Eclipse Dataspace Components, from version 0.5.0 and before version 0.9.0, the ConsumerPullTransferTokenValidationApiController does not check for token validity (expiry, not-before, issuance date), which can allow an attacker to bypass the check for token
- 9.8 Critical severity
Ivanti Virtual Traffic Manager Authentication Bypass Exploited
Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated attacker to bypass authentication of the admin panel.
- 9.6 Critical severity
Chrome: Incorrect Implementation of Authentication Algorithm
Inappropriate implementation in Skia in Google Chrome prior to 115.0.5790.98 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
- 8.8 High severity
Android: Incorrect Implementation of Authentication Algorithm
In smp_proc_rand of smp_act.cc, there is a possible authentication bypass during legacy BLE pairing due to incorrect implementation of a protocol. This could lead to remote escalation of privilege with no additional execution privileges needed. User interactio
- 9.3 Critical severity
Tripwire Enterprise: Incorrect Implementation of Authentication Algorithm
An authentication bypass vulnerability has been identified in the REST and SOAP API components of Tripwire Enterprise (TE) 9.1.0 when TE is configured to use LDAP/Active Directory SAML authentication and its optional "Auto-synchronize LDAP Users, Roles, and Gr
- 9.8 Critical severity
Enterprise Server: Incorrect Implementation of Authentication Algorithm
An authentication bypass vulnerability was present in the GitHub Enterprise Server (GHES) when utilizing SAML single sign-on authentication with the optional encrypted assertions feature. This vulnerability allowed an attacker to forge a SAML response to provi
- 8.8 High severity
DIR-X3260: Incorrect Implementation of Authentication Algorithm
D-Link DIR-X3260 prog.cgi Incorrect Implementation of Authentication Algorithm Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-X3260 routers. Authenticat
- 8.8 High severity
DIR-2150: Incorrect Implementation of Authentication Algorithm
D-Link DIR-2150 HNAP Incorrect Implementation of Authentication Algorithm Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-2150 routers. Authentication is
- 8.8 High severity
DIR-2150: Incorrect Implementation of Authentication Algorithm
D-Link DIR-2150 LoginPassword Incorrect Implementation of Authentication Algorithm Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-2150 routers. Authenti
- 7.5 High severity
Kura: Incorrect Implementation of Authentication Algorithm
In Eclipse Kura LogServlet component included in versions 5.0.0 to 5.4.1, a specifically crafted request to the servlet can allow an unauthenticated user to retrieve the device logs. Also, downloaded logs may be used by an attacker to perform privilege escalat
- 7.5 High severity
NPort 6000 Series: Improper Authentication
A vulnerability has been identified in NPort 6000 Series, making the authentication mechanism vulnerable. This vulnerability arises from the incorrect implementation of sensitive information protection, potentially allowing malicious users to gain unauthorized
- 9.8 Critical severity
FreeBSD: Improper Authentication
pam_krb5 authenticates a user by essentially running kinit with the password, getting a ticket-granting ticket (tgt) from the Kerberos KDC (Key Distribution Center) over the network, as a way to verify the password. However, if a keytab is not provisioned on t
- 9.8 Critical severity
Microsoft SharePoint Server Privilege Escalation Exploited
Microsoft SharePoint Server Elevation of Privilege Vulnerability
- 9.8 Critical severity
Mendix SAML (Mendix 7 compatible): Improper Authentication
A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions >= V1.17.3 < V1.18.0), Mendix SAML (Mendix 7 compatible) (All versions >= V1.16.4 < V1.17.3), Mendix SAML (Mendix 8 compatible) (All versions >= V2.3.0 < V2.4.0), Mendix SAM
- 7.5 High severity
uC-FTPs: Improper Authentication
An authentication bypass vulnerability exists in the Authentication functionality of Weston Embedded uC-FTPs v 1.98.00. A specially crafted set of network packets can lead to authentication bypass and denial of service. An attacker can send a sequence of unaut
- 7.5 High severity
Mendix SAML (Mendix 7 compatible): Improper Authentication
A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions >= V1.16.4 < V1.17.3), Mendix SAML (Mendix 8 compatible) (All versions >= V2.2.0 < V2.3.0), Mendix SAML (Mendix 9 latest compatible, New Track) (All versions >= V3.1.9 < V3.
- 8.8 High severity
exporter-toolkit: Improper Authentication
Prometheus Exporter Toolkit is a utility package to build exporters. Prior to versions 0.7.2 and 0.8.2, if someone has access to a Prometheus web.yml file and users' bcrypted passwords, they can bypass security by poisoning the built-in authentication cache. V
- 9.8 Critical severity
datahub: Improper Verification of Cryptographic Signature
DataHub is an open-source metadata platform. Prior to version 0.8.45, the `StatelessTokenService` of the DataHub metadata service (GMS) does not verify the signature of JWT tokens. This allows an attacker to connect to DataHub instances as any user if Metadata
- 9.8 Critical severity
Cisco Small Business RV Series Router Firmware: Improper Authentication
A vulnerability in the IPSec VPN Server authentication functionality of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to bypass authentication controls and access the IPSec VPN network. This vuln
- 7.5 High severity
Opcenter Quality V13.1: Improper Authentication
A vulnerability has been identified in Opcenter Quality V13.1 (All versions < V13.1.20220624), Opcenter Quality V13.2 (All versions < V13.2.20220624). The affected applications do not properly validate login information during authentication. This could lead t
- 10.0 Critical severity
Cisco Wireless LAN Controller (WLC): Improper Authentication
A vulnerability in the authentication functionality of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to bypass authentication controls and log in to the device through the management interface This vulnerability i