Falhas do tipo CWE-305

154 resultados

Bypass de autenticação por fraqueza secundária

O algoritmo de autenticação em si é correto, mas a implementação pode ser contornada porque há uma falha separada no código — geralmente em validação, lógica de fluxo ou gestão de sessão — que permite pular a verificação de identidade. O risco é que um atacante não quebra a autenticação, mas a ignora.

Exemplo

Um sistema valida corretamente a senha, mas esquece de verificar tokens de sessão em uma rota crítica, ou permite que o usuário altere o parâmetro de ID na URL para acessar dados de outro usuário. A autenticação funciona, mas a autorização (ou re-validação) falha.

Como mitigar

Aplique validação rigorosa em cada ponto de acesso a recursos sensíveis, não apenas no login. Use testes de autorização além de autenticação, revise fluxos de sessão com atenção a edge cases, e implemente testes automatizados que tentam contornar o fluxo normal de autenticação.

CVE-2025-31161CRITICALCrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the crushadmin account (unless a DMZ proxy instaEPSS 99.9%KEVCVE-2020-10923MEDIUMThis vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 rEPSS 84.7%CVE-2023-28126MEDIUMAn authentication bypass vulnerability exists in Avalanche versions 6.3.x and below that could allow an attacker to gain access by exploitinEPSS 66.7%CVE-2023-34124CRITICALThe authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks, allowing authentication bypass. This issueEPSS 46.4%CVE-2025-32011CRITICALKUNBUS Revolution Pi Authentication Bypass by Primary WeaknessEPSS 27.3%CVE-2024-37085MEDIUMVMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain fuEPSS 26.0%KEVCVE-2026-2652HIGHAuthentication Bypass in mlflow/mlflowEPSS 18.9%CVE-2024-20674HIGHWindows Kerberos Security Feature Bypass VulnerabilityEPSS 17.2%CVE-2021-26102CRITICALA relative path traversal vulnerability (CWE-23) in FortiWAN version 4.5.7 and below, 4.4 all versions may allow a remote non-authenticated EPSS 16.8%CVE-2023-0777HIGHAuthentication Bypass by Primary Weakness in modoboa/modoboaEPSS 15.2%CVE-2022-2651CRITICALAuthentication Bypass by Primary Weakness in bookwyrm-social/bookwyrmEPSS 15.1%CVE-2025-13915CRITICALAuthentication bypass in IBM API ConnectEPSS 8.8%CVE-2026-4670CRITICALImproper Authentication vulnerability in Progress MOVEit AutomationEPSS 5.6%CVE-2020-15078—OpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured EPSS 4.9%CVE-2022-0547CRITICALOpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication plug-ins when more than one of them makes uEPSS 3.6%CVE-2024-1403CRITICALAuthentication Bypass in OpenEdge Authentication Gateway and AdminServerEPSS 3.3%CVE-2019-3878HIGHA vulnerability was found in mod_auth_mellon before v0.14.2. If Apache is configured as a reverse proxy and mod_auth_mellon is configured toEPSS 3.0%CVE-2021-3850CRITICALAuthentication Bypass by Primary Weakness in adodb/adodbEPSS 2.2%CVE-2019-14833MEDIUMA flaw was found in Samba, all versions starting samba 4.5.0 before samba 4.9.15, samba 4.10.10, samba 4.11.2, in the way it handles a user EPSS 2.1%CVE-2020-11012CRITICALAuthentication bypass MinIO Admin APIEPSS 1.8%