Fallos del tipo CWE-305

168 resultados

Bypass de autenticação por fraqueza secundária

A autenticação em si é criptograficamente correta, mas pode ser contornada por outra vulnerabilidade no código ou na lógica da aplicação. Exemplo: validar corretamente a senha, mas aceitar um token expirado, ou checar credenciais mas não validar a origem da requisição. O risco é que o atacante não quebra o algoritmo — ele encontra uma porta dos fundos.

Ejemplo

Sistema que valida login com hash bcrypt impecável, mas depois aceita qualquer usuário se um parâmetro GET 'admin=true' estiver presente. Ou API que verifica JWT corretamente, mas esquece de validar se a sessão foi revogada no servidor.

Cómo mitigar

Revise toda a lógica de fluxo após a autenticação: não confie apenas no algoritmo criptográfico. Valide o contexto (origem, timestamp, revogação), execute testes de penetração focados em bypass (parâmetros extras, header manipulation, race conditions) e implemente lista de controle de acesso (ACL) robusta em cada endpoint sensível.

CVE-2024-12582HIGHSkupper: skupper-cli: flawed authentication method may lead to arbitrary file read or denial of serviceEPSS 0.5%CVE-2026-40976CRITICALIn certain circumstances, Spring Boot's default web security is ineffective allowing unauthorized access to all endpoints. For an applicatioEPSS 0.5%CVE-2024-10082HIGHCodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Authentication methoEPSS 0.5%CVE-2024-36388CRITICALMileSight DeviceHub - CWE-305 Missing Authentication for Critical FunctionEPSS 0.5%CVE-2026-3047HIGHOrg.keycloak.broker.saml: keycloak saml broker: authentication bypass due to disabled saml client completing idp-initiated loginEPSS 0.5%CVE-2026-19349CRITICALLemonldap::NG::Portal versions from 2.0.0 before 2.16.9, from 2.17.0 before 2.21.5, from 2.22.0 before 2.23.3 for Perl allow authentication bypass via an OAuth2 state parameter stored as an SSO session in the GitHub and LinkedIn backendsEPSS 0.5%CVE-2022-3100MEDIUMA flaw was found in the openstack-barbican component. This issue allows an access policy bypass via a query string when accessing the API.EPSS 0.4%CVE-2020-10123—The currency dispenser of NCR SelfSev ATMs running APTRA XFS 05.01.00 or earlier does not adequately authenticate session key generation reqEPSS 0.4%CVE-2025-3757CRITICALAuthentication Bypass in OpenPubKeyEPSS 0.4%CVE-2026-10539CRITICALUnauthenticated command injection in Control-M/Server communication commandEPSS 0.4%CVE-2026-41052CRITICALRancher Privilege Escalation from Project Owner to HostEPSS 0.4%CVE-2023-41920CRITICALAuthentication Bypass by Primary Weakness in Kiloview P1/P2 devicesEPSS 0.4%CVE-2025-68609MEDIUMAuthentication bypass in Aries due to misconfigurationEPSS 0.4%CVE-2026-5545MEDIUMwrong reuse of HTTP Negotiate connectionEPSS 0.4%CVE-2023-46611MEDIUMWordPress YOP Poll plugin <= 6.5.28 - Vote Manipulation Due to Broken Captcha Control VulnerabilityEPSS 0.4%CVE-2026-3784MEDIUMwrong proxy connection reuse with credentialsEPSS 0.4%CVE-2025-68435CRITICALZerobyte has Authentication Bypass by Primary WeaknessEPSS 0.4%CVE-2025-51663HIGHA vulnerability found in IPRateLimit implementation of FileCodeBox up to 2.2 allows remote attackers to bypass ip-based rate limit protectioEPSS 0.4%CVE-2024-8642MEDIUMEclipse EDC: Consumer pull transfer token validation checks not appliedEPSS 0.4%CVE-2026-1290MEDIUM[PI141230] Fixed A broken access control issue.EPSS 0.4%