Weaknesses of type CWE-304

52 results

Autenticação com etapa crítica omitida

O produto implementa um mecanismo de autenticação, mas pula uma ou mais etapas essenciais do processo, enfraquecendo-o significativamente. Isso permite que um atacante contorne a verificação de identidade parcialmente, acessando recursos que deveriam estar protegidos.

Example

Um sistema implementa autenticação multifator (senha + SMS), mas em certos fluxos de código legado permite login apenas com senha válida, ignorando completamente o envio e validação do código SMS. Um atacante que descobre ou reutiliza uma senha consegue entrar sem passar pela segunda camada.

How to mitigate

Revise todos os pontos de entrada de autenticação e garanta que a sequência completa de verificações seja executada em 100% dos casos — use padrões de referência (gateway único, chain of responsibility) em vez de implementações espalhadas. Teste casos de bypass, incluindo fluxos legados, em testes de segurança e CI/CD.

CVE-2022-39360MEDIUMMetabase SSO users able to circumvent IdP login by doing password resetEPSS 0.6%CVE-2025-24322HIGHAn unsafe default authentication vulnerability exists in the Initial Setup Authentication functionality of Tenda AC6 V5.0 V02.03.01.110. A sEPSS 0.6%CVE-2026-67351HIGHSerendipity < 2.6.1 Authentication Bypass via Username CollisionEPSS 0.6%CVE-2026-40542HIGHApache HttpClient: SCRAM-SHA-256 mutual authentication bypass may cause the client to accept authentication without proper mutual authentication verificationEPSS 0.5%CVE-2026-89068HIGHMOVEit Transfer Authentication bypass in LDAP sign-onEPSS 0.5%CVE-2026-59564CRITICALAuthentication bypass between ZCC and client connector portalEPSS 0.5%CVE-2026-57915HIGHApache Kerby: Kerberos Pre-Authentication BypassEPSS 0.5%CVE-2024-45764CRITICALDell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) a Missing Critical Step in Authentication vulnerability. An unauthenticated atEPSS 0.5%CVE-2026-108071HIGHImproper Multi-Factor Authentication Validation Allows Authentication BypassEPSS 0.5%CVE-2026-76207HIGHphpMyFAQ before 4.1.7 2FA Bypass via Remember-Me CookieEPSS 0.5%CVE-2026-73535HIGHGitea second-factor bypass through OpenID identity linkingEPSS 0.4%CVE-2026-54723MEDIUMdevpi: Database contents leakEPSS 0.4%CVE-2023-22833HIGHMandatory control bypass in Lime2EPSS 0.4%CVE-2026-119776MEDIUMfrr: ospf6d fails to enforce all OSPFv3 packets use IPv6 link-local addressesEPSS 0.4%CVE-2026-30831HIGHRocket.Chat: 2FA bypass and login of deactivated users via EE ddp-streamerEPSS 0.4%CVE-2026-94052CRITICALApache MINA SSHD: LDAP password authentication ineffectiveEPSS 0.4%CVE-2024-7745MEDIUMMulti-Factor Authentication Bypass in Progress WS_FTP ServerEPSS 0.4%CVE-2025-55138HIGHLinkJoin through 882f196 mishandles token ownership in password reset.EPSS 0.3%CVE-2026-123297MEDIUMIn JetBrains Hub before 2026.2.52519 two-factor authentication bypass was possible via the password reset flowEPSS 0.3%CVE-2024-20153HIGHIn wlan STA, there is a possible way to trick a client to connect to an AP with spoofed SSID. This could lead to remote information disclosuEPSS 0.3%