CWEweakness

CWE-303 Incorrect Implementation of Authentication Algorithm

Official page ↗
Abstraction
Base
Structure
Simple
Status
Draft
Languages
Not Language-Specific
CWE version
5.0

Description

The requirements for the product dictate the use of an established authentication algorithm, but the implementation of the algorithm is incorrect.

Common consequences

• Access Control: Bypass Protection Mechanism — An incorrect implementation may allow authentication to be bypassed.

Observed examples

• CVE-2003-0750: Conditional should have been an 'or' not an 'and'.

Related

Attack pattern · CAPEC (1)

  • CAPEC-90 Reflection Attack in Authentication Protocol attack pattern

Observed example · CVE (1)

  • CVE-2003-0750 secure.php in PY-Membres 4.2 and earlier allows remote attackers to bypass authentication by setting the adminpy parameter. vulnerability

Child of · CWE (1)

Referenced by CAPEC · weakness (1)

  • CAPEC-90 Reflection Attack in Authentication Protocol attack pattern

Referenced by CVE · weakness (119)

  • CVE-2026-84296 Multi-Factor Authentication Bypass vulnerability in SSH component in Progress Software WS_FTP Server versions prior to 2024.0.6, and… vulnerability
  • CVE-2026-86589 Incorrect implementation of authentication algorithm vulnerability in Apache Answer. vulnerability
  • CVE-2026-104939 Description NGINX Ingress Controller has a vulnerability when implementing an externalAuth policy for ingress. vulnerability
  • CVE-2026-89077 Incorrect implementation of authentication algorithm vulnerability in Progress MOVEit Transfer (SFTP module). vulnerability
  • CVE-2026-83906 Incorrect implementation of authentication algorithm in Windows Shell allows an unauthorized attacker to perform spoofing over a network. vulnerability
  • CVE-2026-85972 Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently verify the identity of a Kerberos… vulnerability
  • CVE-2026-107279 The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. vulnerability
  • CVE-2026-97720 Incorrect implementation of JWT/OAuth authentication in Impala executors in Apache Impala versions up to and including 4.5.2 which allows… vulnerability
  • CVE-2026-92873 Pgpool-II contains an incorrect implementation of an authentication algorithm, which may allow an unauthenticated attacker to promote an… vulnerability
  • CVE-2026-101878 Bitwarden Server 2025.6.0 before 2026.5.0 declares the @ExternalId parameter of the User_ReadBySsoUserOrganizationIdExternalId stored… vulnerability
  • CVE-2026-77244 MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). vulnerability
  • CVE-2026-15688 Incorrect Implementation of Authentication Algorithm Vulnerability in Mitsubishi Electric GX Works3 and Motion Control Setting allows a… vulnerability
  • CVE-2026-93394 A flaw in libmongoc's SCRAM authentication implementation caused the client to continue the authentication handshake and transmit the… vulnerability
  • CVE-2026-73444 On affected platforms running Arista EOS with VRRPv2 IP Authentication Header (IP-AH) authentication configured, an unauthenticated… vulnerability
  • CVE-2026-73458 On affected platforms running Arista EOS with authenticated Bidirectional Forwarding Detection (BFD) sessions configured, a specially… vulnerability
  • CVE-2026-3869 CWE-303 : Incorrect Implementation of Authentication Algorithm vulnerability exists that could cause loss of confidentiality, integrity and… vulnerability
  • CVE-2026-78629 The Okta Hyperdrive agent plugin returns a success response without a signed SAML assertion when the organization's policy requires no MFA… vulnerability
  • CVE-2026-9853 A vulnerability exists in SYS600 which allows any user authenticated to the operating system of the server hosting the application to read… vulnerability
  • CVE-2026-9854 A vulnerability exists in SYS600 RBAC mechanism where users having access to the engineering tools could elevate their privileges to… vulnerability
  • CVE-2026-49467 Pingvin Share X is a secure and easy self-hosted file sharing platform. vulnerability
  • CVE-2026-66411 DEEBOT PRO M1 and DEEBOT PRO K1VAC incorrectly implement authentication algorithm in Websocket communications. vulnerability
  • CVE-2026-11430 Grav CMS's scheduler-webhook plugin contains an authentication bypass in the webhook token check. vulnerability
  • CVE-2026-10050 In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes. vulnerability
  • CVE-2026-59309 VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. vulnerability
  • CVE-2026-66028 Ekushey Project Manager CRM through version 5.0 contains a missing uniqueness constraint vulnerability that allows authenticated… vulnerability
  • CVE-2026-57852 Grav CMS scheduler-webhook plugin contains an authentication bypass vulnerability that allows unauthenticated remote attackers to trigger… vulnerability
  • CVE-2026-47300 Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network. vulnerability
  • CVE-2026-50360 Incorrect implementation of authentication algorithm in Windows SMB Server allows an authorized attacker to elevate privileges over a… vulnerability
  • CVE-2026-41053 Incorrect authentication caching in the team member ship expansion of the Rancher Github authentication provider caused it granting… vulnerability
  • CVE-2026-12773 A weakness has been identified in BerriAI litellm up to 1.59.8. vulnerability
Show all 119 ›

Referenced by CWE · child of (1)

  • CWE-304 Missing Critical Step in Authentication weakness

Referenced by OWASP · mapped cwe (1)

  • A07:2025 Authentication Failures Top 10 2025