CWEweakness

CWE-305 Authentication Bypass by Primary Weakness

Official page ↗
Abstraction
Base
Structure
Simple
Status
Draft
Languages
Not Language-Specific
CWE version
5.0

Description

The authentication algorithm is sound, but the implemented mechanism can be bypassed as the result of a separate weakness that is primary to the authentication error.

Common consequences

• Access Control: Bypass Protection Mechanism

Observed examples

• CVE-2002-1374: The provided password is only compared against the first character of the real password. • CVE-2000-0979: The password is not properly checked, which allows remote attackers to bypass access controls by sending a 1-character password that matches the first character of the real password. • CVE-2001-0088: Chain: Forum software does not properly initialize an array, which inadvertently sets the password to a single character, allowing remote attackers to easily guess the password and gain administrative privileges.

Related

Observed example · CVE (3)

  • CVE-2002-1374 The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x before 4.0.6, allows remote attackers to gain privileges via a brute force… vulnerability
  • CVE-2001-0088 common.inc.php in phpWebLog 0.4.2 does not properly initialize the $CONF array, which inadvertently sets the password to a single… vulnerability
  • CVE-2000-0979 File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file share, which… vulnerability

Child of · CWE (1)

Referenced by CVE · weakness (178)

  • CVE-2026-114230 When dispatching SASL frames to authenticate the peer, Proton will also dispatch AMQP frames if they claim to be SASL frames. vulnerability
  • CVE-2026-10537 A misconfiguration issue in the affected service in Control-M/Enterprise Manager and Control-M/Server may allow unauthenticated remote… vulnerability
  • CVE-2026-110883 Authentication Bypass by Primary Weakness vulnerability in VideoWhisper.com 2Way VideoCalls and Random Chat webcam-2way-videochat allows… vulnerability
  • CVE-2026-111283 BMC Helix Network Management on-prem 26.3.00 before 26.3.01 contains an authentication bypass vulnerability that allows unauthenticated… vulnerability
  • CVE-2026-107808 Nginx UI is a web user interface for the Nginx web server. vulnerability
  • CVE-2026-103059 When Gitea's built-in SSH server is enabled (`START_SSH_SERVER = true`), the presented public key was looked up with an SQL `LIKE`… vulnerability
  • CVE-2026-77185 Authentication bypass in sshd-core in Apache MINA SSHD versions 2.0.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5 for a certain (presumed rare) way… vulnerability
  • CVE-2026-94053 Authentication bypass via LDAP injection in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5. vulnerability
  • CVE-2026-59563 Zscaler MCP Server versions 0.7.0 and 0.7.1 has an issue where HMAC confirmation tokens were not bound to the target resource identifier,… vulnerability
  • CVE-2026-88837 BusyBox httpd treats yescrypt ($y$) password hashes as plaintext during Basic Authentication, inverting the authentication check. vulnerability
  • CVE-2026-85500 Authentication Bypass by Primary Weakness vulnerability in team-alembic AshAuthentication allows an unconfirmed user to obtain a session,… vulnerability
  • CVE-2026-86207 An authentication bypass in N-central < 2026.3 HF 3 leads to authentication bypass in internal only APIs vulnerability
  • CVE-2026-81578 An improper access control vulnerability exists in the web management interface of PaperCut MF and PaperCut NG. vulnerability
  • CVE-2026-16895 A logic vulnerability (fail-open condition) has been identified within the Metasploit Framework's JSON-RPC web service interface. vulnerability
  • CVE-2026-53561 An improper authentication vulnerability in HiveServer2 SAML bearer-token validation in Apache Hive 4.0.0 through 4.2.0 (and later… vulnerability
  • CVE-2026-78619 Punk::Plugin::TOTP versions before 0.05 for Perl accept another account's recovery code at the two-factor challenge because… vulnerability
  • CVE-2025-14600 An insecure deserialization vulnerability in vsDesk allows a remote attacker to gain unauthorized administrative access. vulnerability
  • CVE-2026-19349 Lemonldap::NG::Portal versions from 2.0.0 before 2.16.9, from 2.17.0 before 2.21.5, from 2.22.0 before 2.23.3 for Perl allow authentication… vulnerability
  • CVE-2026-1621 Authentication bypass by primary weakness vulnerability in Universal Software Inc. vulnerability
  • CVE-2026-19292 Re-pairing with a legitimate device can use a lower security level than previous making brute-forcing the LTK easier. vulnerability
  • CVE-2026-65935 Passkey entry Bluetooth LE legacy pairing can be bypassed in the RS9116W and SiWx917 by manipulating the temporary key value. vulnerability
  • CVE-2026-62427 [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] To manage… vulnerability
  • CVE-2026-16103 A flaw was found in the keycloak-services component of Keycloak. vulnerability
  • CVE-2026-9571 Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4, 10.11.x <= 10.11.19 fail to invalidate OAuth refresh tokens upon user account… vulnerability
  • CVE-2026-9597 Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4 fail to verify whether a guest account is deactivated before creating a session in… vulnerability
  • CVE-2026-35159 Dell Client Platform BIOS contains an Authentication Bypass by Primary Weakness vulnerability. vulnerability
  • CVE-2026-8932 libcurl would reuse a previously created connection even when some mTLS config related option had been changed that should have prohibited… vulnerability
  • CVE-2026-10539 A Control-M/Server communication command does not sufficiently filter or sanitize user-supplied input. vulnerability
  • CVE-2026-41052 Improper privilege handling could be used by users with Project Owner role to escalate privileges, in Rancher versions 2.14 before 2.14.2,… vulnerability
  • CVE-2025-4994 The SafeLine SL6 and SL6+ devices integrated into elevator emergency intercom systems are vulnerable to an authentication bypass. vulnerability
Show all 178 ›

Referenced by OWASP · mapped cwe (1)

  • A07:2025 Authentication Failures Top 10 2025