Weaknesses of type CWE-302

44 results

Bypass de autenticação por dados assumidos como imutáveis

A aplicação assume que certos dados (como IDs de usuário, tokens ou flags de privilégio) não podem ser alterados pelo cliente e, portanto, não valida adequadamente essas informações. Um atacante consegue modificar esses dados imutáveis (via requisição HTTP, cookie ou parâmetro) para se passar por outro usuário ou elevar seus privilégios sem autenticação válida.

Example

Um sistema web armazena em cookie o ID do usuário logado como 'user_id=123' e confia cegamente nele. O atacante intercepta a requisição, muda para 'user_id=456' (outro usuário) e a aplicação processa como se fosse autêntico, concedendo acesso à conta alheia.

How to mitigate

Nunca confie em dados do cliente para decisões de autenticação e autorização. Valide sempre a sessão/token no servidor, use identificadores opacos (não sequenciais), implemente verificações de integridade criptográfica (HMAC, assinatura JWT) e mantenha estado confiável apenas no backend.

CVE-2024-3741HIGHElectrolink FM/DAB/TV Transmitter Authentication Bypass by Assumed-Immutable DataEPSS 0.5%CVE-2024-3462MEDIUMAuthorization bypass in Ant Media ServerEPSS 0.5%CVE-2024-47086HIGHOTP Bypass VulnerabilityEPSS 0.5%CVE-2025-46647MEDIUMApache APISIX: improper validation of issuer from introspection discovery url in plugin openid-connectEPSS 0.5%CVE-2026-39429HIGHkcp's cache server is accessible without authentication or authorization checksEPSS 0.4%CVE-2025-26522HIGHAuthentication Bypass Vulnerability in RupeeWeb trading platformEPSS 0.4%CVE-2024-22179HIGHElectrolink FM/DAB/TV Transmitter Authentication Bypass by Assumed-Immutable DataEPSS 0.4%CVE-2024-8475MEDIUMProtection Mechanism Failure in Digital Operation Services' WiFiBuradaEPSS 0.4%CVE-2022-2503MEDIUMLinux Kernel LoadPin bypass via dm-verity table reloadEPSS 0.4%CVE-2025-8855HIGH2FA Expiry Bypass in Optimus Software's Brokerage AutomationEPSS 0.4%CVE-2025-20285MEDIUMCisco Identity Services Engine IP Filter Access Restriction for Admin Access Configuration Bypass VulnerabilityEPSS 0.4%CVE-2026-5423HIGHSubscription Authentication Bypass via Unverified connectionParams.jwtEPSS 0.4%CVE-2022-40703MEDIUMCWE-302 Authentication Bypass by Assumed-Immutable Data in AliveCor Kardia App version 5.17.1-754993421 and prior on Android allows an unaEPSS 0.3%CVE-2026-61682CRITICALkcp front-proxy does not strip inbound X-Remote-* identity headers, allowing any authenticated client to inject groups/warrants and impersonate system:masters in any workspaceEPSS 0.3%CVE-2026-40285HIGHWeGIA has SQL Injection via Session Variable Override in DespachoControle.phpEPSS 0.3%CVE-2026-28510MEDIUMelabftw allows MFA bypass during loginEPSS 0.3%CVE-2026-13267HIGHSecurity vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify AccessEPSS 0.2%CVE-2025-43992MEDIUMDell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an authentication bypass by assumed-immutEPSS 0.2%CVE-2024-45370HIGHAn authentication bypass vulnerability exists in the User profile management functionality of Socomec Easy Config System 2.6.1.0. A speciallEPSS 0.2%CVE-2026-48781CRITICALPostiz has cross-tenant SUPERADMIN takeover via Skool-provider JWT forgeryEPSS 0.2%