CWE-592 - DEPRECATED: Authentication Bypass Issues

Home/CWEs/CWE info/

CWE-592

Abstraction:
Class

Structure:
Simple

Status:
Deprecated

Weakness Name: DEPRECATED: Authentication Bypass Issues

Description: This weakness has been deprecated because it covered redundant concepts already described in CWE-287.

Release Date:
2006-12-15

Latest Modification Date:
2023-06-29

Latest Security News

Five lesser known Task Manager features in Windows 11

Ruijie Networks' Cloud Platform Flaws Could Expose 50,000 Devices to Remote Attacks

Critical SQL Injection Vulnerability in Apache Traffic Control Rated 9.9 CVSS — Patch Now

Iran's Charming Kitten Deploys BellaCPP: A New C++ Variant of BellaCiao Malware

New botnet exploits vulnerabilities in NVRs, TP-Link routers

Too Much 'Trust,' Not Enough 'Verify'

FBI links North Korean hackers to $308 million crypto heist

Trump 2.0 Portends Big Shift in Cybersecurity Policies

Common Alerts

HighViewstate without MAC Signature (Unsure)

HighAccess Control Issue - Improper Authorization

MediumAuthentication Credentials Captured

InformationalCross Site Scripting (Persistent) - Prime

HighRemote OS Command Injection

MediumBypassing 403

HighSQL Injection - Oracle

InformationalBase64 Disclosure in WebSocket message

MediumCSP: script-src unsafe-inline

LowOld Asp.Net Version in Use

Latest CVE List

CVE-2021-44207 Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability

CVE-2024-12356 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability

CVE-2018-14933 NUUO NVRmini Devices OS Command Injection Vulnerability

CVE-2022-23227 NUUO NVRmini 2 Devices Missing Authentication Vulnerability

CVE-2019-11001 Reolink Multiple IP Cameras OS Command Injection Vulnerability

CVE-2021-40407 Reolink RLC-410W IP Camera OS Command Injection Vulnerability

CVE-2024-55956 Cleo Multiple Products Unauthenticated File Upload Vulnerability

CVE-2024-20767 Adobe ColdFusion Improper Access Control Vulnerability

CVE-2024-35250 Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability

CVE-2024-50623 Cleo Multiple Products Unrestricted File Upload Vulnerability

Top CWE List

CWE-581 Object Model Violation: Just One of Equals and Hashcode Defined

HighCWE-863 Incorrect Authorization

HighCWE-200 Exposure of Sensitive Information to an Unauthorized Actor

HighCWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

CWE-1051 Initialization with Hard-Coded Network Resource Configuration Data

CWE-1395 Dependency on Vulnerable Third-Party Component

CWE-66 Improper Handling of File Names that Identify Virtual Resources

CWE-1336 Improper Neutralization of Special Elements Used in a Template Engine

CWE-201 Insertion of Sensitive Information Into Sent Data

MediumCWE-352 Cross-Site Request Forgery (CSRF)

Free security scan for your website

Don't show website scan report rating on the leaderboard

CWE-592 - DEPRECATED: Authentication Bypass Issues

This weakness has been deprecated because it covered redundant concepts already described in CWE-287.