CWE-592 - DEPRECATED: Authentication Bypass Issues

Home/CWEs/CWE info/

CWE-592

Abstraction:
Class

Structure:
Simple

Status:
Deprecated

Weakness Name: DEPRECATED: Authentication Bypass Issues

Description: This weakness has been deprecated because it covered redundant concepts already described in CWE-287.

Release Date:
2006-12-15

Latest Modification Date:
2023-06-29

Top Security News

CISA orders federal agencies to secure Microsoft 365 tenants

Google Chrome uses AI to analyze pages in new scam detection feature

Recorded Future CEO applauds "undesirable" designation by Russia

Rspack npm Packages Compromised with Crypto Mining Malware in Supply Chain Attack

Lazarus Group Spotted Targeting Nuclear Engineers with CookiePlus Malware

Apache Tomcat Vulnerability CVE-2024-56337 Exposes Servers to RCE Attacks

Five lesser known Task Manager features in Windows 11

Exploit released for critical WhatsUp Gold RCE flaw, patch now

Top Alert List

MediumAbsence of Anti-CSRF Tokens

Content Security Policy (CSP) Header Not Set

InformationalInformation Disclosure - Suspicious Comments

MediumMissing Anti-clickjacking Header

CSP

InformationalRe-examine Cache-control Directives

LowCookie without SameSite Attribute

InformationalModern Web Application

LowX-Content-Type-Options Header Missing

LowServer Leaks Version Information via "Server" HTTP Response Header Field

Latest CVE List

CVE-2021-44207 Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability

CVE-2024-12356 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability

CVE-2018-14933 NUUO NVRmini Devices OS Command Injection Vulnerability

CVE-2022-23227 NUUO NVRmini 2 Devices Missing Authentication Vulnerability

CVE-2019-11001 Reolink Multiple IP Cameras OS Command Injection Vulnerability

CVE-2021-40407 Reolink RLC-410W IP Camera OS Command Injection Vulnerability

CVE-2024-55956 Cleo Multiple Products Unauthenticated File Upload Vulnerability

CVE-2024-20767 Adobe ColdFusion Improper Access Control Vulnerability

CVE-2024-35250 Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability

CVE-2024-50623 Cleo Multiple Products Unrestricted File Upload Vulnerability

Common CWEs

CWE-544 Missing Standardized Error Handling Mechanism

HighCWE-116 Improper Encoding or Escaping of Output

CWE-466 Return of Pointer Value Outside of Expected Range

CWE-527 Exposure of Version-Control Repository to an Unauthorized Control Sphere

CWE-576 EJB Bad Practices: Use of Java I/O

CWE-340 Generation of Predictable Numbers or Identifiers

CWE-1272 Sensitive Information Uncleared Before Debug/Power State Transition

CWE-608 Struts: Non-private Field in ActionForm Class

CWE-92 DEPRECATED: Improper Sanitization of Custom Special Characters

CWE-458 DEPRECATED: Incorrect Initialization

Free security scan for your website

Don't show website scan report rating on the leaderboard

CWE-592 - DEPRECATED: Authentication Bypass Issues

This weakness has been deprecated because it covered redundant concepts already described in CWE-287.