Authentication Bypass by Primary Weakness
CWE-305
The authentication algorithm is sound, but the implemented mechanism can be bypassed as the result of a separate weakness that is primary to the authentication error.
We track 89 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 8.7. 3 have been exploited in real attacks.
Latest Authentication Bypass by Primary Weakness vulnerabilities
- 9.1 Critical severity
zerobyte: Authentication Bypass by Primary Weakness
Zerobyte is a backup automation tool Zerobyte versions prior to 0.18.5 and 0.19.0 contain an authentication bypass vulnerability where authentication middleware is not properly applied to API endpoints. This results in certain API endpoints being accessible wi
- 7.5 High severity
Filecodebox: Authentication Bypass by Primary Weakness
A vulnerability found in IPRateLimit implementation of FileCodeBox up to 2.2 allows remote attackers to bypass ip-based rate limit protection and failed attempt restrictions by faking X-Real-IP and X-Forwarded-For HTTP headers. This can enable attackers to per
- 9.8 Critical severity
Energy-Controlling EWIO2-M: Authentication Bypass by Primary Weakness
The commissioning wizard on the affected devices does not validate if the device is already initialized. An unauthenticated remote attacker can construct POST requests to set root credentials.
- 9.1 Critical severity
mantisbt: Authentication Bypass by Primary Weakness
Mantis Bug Tracker (MantisBT) is an open source issue tracker. Due to incorrect use of loose (==) instead of strict (===) comparison in the authentication code in versions 2.27.1 and below.PHP type juggling will cause certain MD5 hashes matching scientific not
- 9.8 Critical severity
IBM Maximo Application Suite: Authentication Bypass by Primary Weakness
IBM Maximo Application Suite 9.0.0 through 9.0.15 and 9.1.0 through 9.1.4 could allow a remote attacker to bypass authentication mechanisms and gain unauthorized access to the application.
- 7.3 High severity
Liquidfiles: Authentication Bypass by Primary Weakness
LiquidFiles filetransfer server is vulnerable to a user enumeration issue in its password reset functionality. The application returns distinguishable responses for valid and invalid email addresses, allowing unauthenticated attackers to determine the existenc
- 7.4 High severity
HarmonyOS: Authentication Bypass by Primary Weakness
Binding authentication bypass vulnerability in the devicemanager module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- 7.7 High severity
panel: Authentication Bypass by Primary Weakness
RatPanel is a server operation and maintenance management panel. In versions 2.3.19 through 2.5.5, when an attacker obtains the backend login path of RatPanel (including but not limited to weak default paths, brute-force cracking, etc.), they can execute syste
- 8.2 High severity
BigFix Remote Control: Authentication Bypass by Primary Weakness
Improper access restrictions in HCL BigFix Remote Control Server WebUI (versions 10.1.0.0248 and lower) allow non-admin users to view unauthorized information on certain web pages.
- 9.8 Critical severity
filebrowser: Authentication Bypass by Primary Weakness
File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename, and edit files. In version 2.39.0, File Browser’s authentication system issues long-lived JWT tokens that remain valid even afte
- 7.5 High severity
HarmonyOS: Authentication Bypass by Primary Weakness
Authentication vulnerability in the distributed collaboration framework module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- 9.3 Critical severity
Pgpool-II: Authentication Bypass by Primary Weakness
Pgpool-II provided by PgPool Global Development Group contains an authentication bypass by primary weakness vulnerability. if the vulnerability is exploited, an attacker may be able to log in to the system as an arbitrary user, allowing them to read or tamper
- 9.8 Critical severity
OPKSSH: Improper Verification of Cryptographic Signature
Versions of OpenPubkey library prior to 0.10.0 contained a vulnerability that would allow a specially crafted JWS to bypass signature verification. As OPKSSH depends on the OpenPubkey library for authentication, this vulnerability in OpenPubkey also applies to
- 9.8 Critical severity
Revolution Pi PiCtory: Authentication Bypass by Primary Weakness
KUNBUS PiCtory versions 2.5.0 through 2.11.1 have an authentication bypass vulnerability where a remote attacker can bypass authentication to get access due to a path traversal.
- 10.0 Critical severity
Revolution Pi OS Bookworm: Authentication Bypass by Primary Weakness
KUNBUS Revolution Pi OS Bookworm 01/2025 is vulnerable because authentication is not configured by default for the Node-RED server. This can give an unauthenticated remote attacker full access to the Node-RED server where they can run arbitrary commands on the
- 9.8 Critical severity
CrushFTP Authentication Bypass Exploited
CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the crushadmin account (unless a DMZ proxy instance is used), as exploited in the wild in March and April 2025, aka "Unauthenticated HTTP(S) port access." A race condit
- 8.1 High severity
langgenius/dify: Authentication Bypass by Primary Weakness
In langgenius/dify v0.10.1, the `/forgot-password/resets` endpoint does not verify the password reset code, allowing an attacker to reset the password of any user, including administrators. This vulnerability can lead to a complete compromise of the applicatio
- 8.1 High severity
Sunshine: Authentication Bypass by Primary Weakness
Sunshine is a self-hosted game stream host for Moonlight. In 0.23.1 and earlier, Sunshine's pairing protocol implementation does not validate request order and is thereby vulnerable to a MITM attack, potentially allowing an unauthenticated attacker to pair a c
- 9.1 Critical severity
SonicOS: Authentication Bypass by Primary Weakness
SSL-VPN MFA Bypass in SonicWALL SSL-VPN can arise in specific cases due to the separate handling of UPN (User Principal Name) and SAM (Security Account Manager) account names when integrated with Microsoft Active Directory, allowing MFA to be configured indepe
- 7.1 High severity
Service Interconnect 1 for RHEL 9: Authentication Bypass by Primary Weakness
A flaw was found in the skupper console, a read-only interface that renders cluster network, traffic details, and metrics for a network application that a user sets up across a hybrid multi-cloud environment. When the default authentication method is used, a r
- 8.1 High severity
Cisco Modeling Labs: Authentication Bypass by Primary Weakness
A vulnerability in the external authentication mechanism of Cisco Modeling Labs could allow an unauthenticated, remote attacker to access the web interface with administrative privileges. This vulnerability is due to the improper handling of certain messages t
- 7.8 High severity
OpenAFS: Authentication Bypass by Primary Weakness
A local user can bypass the OpenAFS PAG (Process Authentication Group) throttling mechanism in Unix clients, allowing the user to create a PAG using an existing id number, effectively joining the PAG and letting the user steal the credentials in that PAG.
- 9.0 Critical severity
CodeChecker: Authentication Bypass by Primary Weakness
CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Authentication method confusion allows logging in as the built-in root user from an external service. The built-in root user up until 6.24.1
- 9.8 Critical severity
1-Click Login: Passwordless Authentication: Improper Authentication
Authentication Bypass by Primary Weakness vulnerability in Swoop 1-Click Login: Passwordless Authentication allows Authentication Bypass.This issue affects 1-Click Login: Passwordless Authentication: 1.4.5.
- 7.1 High severity
Cisco Analog Telephone Adaptor (ATA) Software: Authentication Bypass by Primary Weakness
A vulnerability in the web-based management interface of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to modify the configuration or reboot an affected device. This vulnerability is due to the HTTP serv
- 8.1 High severity
Eclipse EDC Connector: Improper Authentication
In Eclipse Dataspace Components, from version 0.5.0 and before version 0.9.0, the ConsumerPullTransferTokenValidationApiController does not check for token validity (expiry, not-before, issuance date), which can allow an attacker to bypass the check for token
- 8.8 High severity
RHOAI-2.14-RHEL-8: Authentication Bypass by Primary Weakness
A vulnerability was found in OpenShift AI that allows for authentication bypass and privilege escalation across models within the same namespace. When deploying AI models, the UI provides the option to protect models with authentication. However, credentials f
- 7.3 High severity
WooCommerce - Social Login: Authentication Bypass by Primary Weakness
The WooCommerce - Social Login plugin for WordPress is vulnerable to unauthenticated privilege escalation in all versions up to, and including, 2.7.3. This is due to a lack of brute force controls on a weak one-time password. This makes it possible for unauthe
- 9.8 Critical severity
P1/P2: Authentication Bypass by Primary Weakness
The vulnerability allows attackers access to the root account without having to authenticate. Specifically, if the device is configured with the IP address of 10.10.10.10, the root user is automatically logged in.
- 7.2 High severity
VMware ESXi Authentication Bypass Exploited
VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously configured to use AD for user management https://blogs.vmware.com/vsphere/
- 7.5 High severity
Red Hat Certificate System 10.4 EUS for RHEL-8: Authentication Bypass by Primary Weakness
A flaw was found in dogtag-pki and pki-core. The token authentication scheme can be bypassed with a LDAP injection. By passing the query string parameter sessionID=*, an attacker can authenticate with an existing session saved in the LDAP directory server, whi
- 7.3 High severity
mantisbt: Authentication Bypass by Primary Weakness
MantisBT (Mantis Bug Tracker) is an open source issue tracker. Insufficient access control in the registration and password reset process allows an attacker to reset another user's password and takeover their account, if the victim has an incomplete request pe
- 7.5 High severity
Cisco IP Phones with Multiplatform Firmware: Authentication Bypass by Primary Weakness
A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to retrieve sensitive information from an affected device. This vulnerability is due to a lack of authentication for specific endpo
- 9.8 Critical severity
TeoBASE: Authentication Bypass by Primary Weakness
Authentication Bypass by Primary Weakness vulnerability in TeoSOFT Software TeoBASE allows Authentication Bypass. This issue affects TeoBASE: through 20240327. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
- 9.8 Critical severity
Octopod: Authentication Bypass by Primary Weakness
Authentication Bypass by Primary Weakness vulnerability in XPodas Octopod allows Authentication Bypass. This issue affects Octopod: before v1. NOTE: The vendor was contacted and it was learned that the product is not supported.
- 9.8 Critical severity
UFace 5: Authentication Bypass by Primary Weakness
Authentication Bypass by Primary Weakness vulnerability in ZKSoftware Biometric Security Solutions UFace 5 allows Authentication Bypass. This issue affects UFace 5: through 12022024.
- 9.8 Critical severity
OpenEdge: Authentication Bypass by Primary Weakness
In OpenEdge Authentication Gateway and AdminServer prior to 11.7.19, 12.2.14, 12.8.1 on all platforms supported by the OpenEdge product, an authentication bypass vulnerability has been identified. The vulnerability is a bypass to authentication based on a fail
- 7.8 High severity
MT6739, MT6753, MT6757, MT6761, MT6762…: Authentication Bypass by Primary Weakness
In telephony, there is a possible escalation of privilege due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08441419; Iss
- 7.7 High severity
eWeLink - Smart Home: Authentication Bypass by Primary Weakness
Improper privilege management vulnerability in CoolKit Technology eWeLink on Android and iOS allows application lockscreen bypass.This issue affects eWeLink before 5.2.0.
- 9.8 Critical severity
Visual COBOL, COBOL Server, Enterprise…: Improper Authentication
User authentication with username and password credentials is ineffective in OpenText (Micro Focus) Visual COBOL, COBOL Server, Enterprise Developer, and Enterprise Server (including product variants such as Enterprise Test Server), versions 7.0 patch updates