CWE-305 - Authentication Bypass by Primary Weakness

Description

The authentication algorithm is sound, but the implemented mechanism can be bypassed as the result of a separate weakness that is primary to the authentication error.

Latest vulnerabilities for CWE-305

Multiple vulnerabilities in Siemens OPC UA 2025-03-12
High Yes Public exploit
Multiple vulnerabilities in SonicWall SonicOS 2025-01-08
Medium Yes Public exploit
Multiple vulnerabilities in Cisco ATA 190 Series Analog Telephone Adapter Firmware 2024-10-17
High Yes
Multiple vulnerabilities in MantisBT 2024-05-13
Medium Yes
Multiple vulnerabilities in Cisco IP Phone 6800, 7800 and 8800 Series with Multiplatform Firmware 2024-05-02
Medium Yes
Authentication Bypass by Primary Weakness in Emerson ROC800 Series RTU and DL8000 Preset Controller 2023-07-26
High No
Multiple vulnerabilities in SonicWall GMS and Analytics 2023-07-18
High Yes Public exploit

References

Description of CWE-305 on Mitre website