CWE
Home > CWE List > CWE-592 Individual Dictionary Definition (Draft 9)   View the CWE List

CWE-592 Individual Dictionary Definition (Draft 9)

Authentication Bypass Issues
Weakness ID
Status: Incomplete

592 (Weakness Class)

Description

Summary

The software does not properly perform authentication, allowing it to be bypassed through various methods.

Relationships
NatureTypeIDName
ChildOfWeakness ClassWeakness ClassWeakness Class287Insufficient Authentication
ParentOfWeakness VariantWeakness VariantWeakness Variant288Authentication Bypass by Alternate Path/Channel
ParentOfWeakness VariantWeakness VariantWeakness Variant289Authentication Bypass by Alternate Name
ParentOfWeakness BaseWeakness BaseWeakness Base290Authentication Bypass by Spoofing
ParentOfWeakness BaseWeakness BaseWeakness Base294Authentication Bypass by Capture-replay
ParentOfWeakness VariantWeakness VariantWeakness Variant302Authentication Bypass by Assumed-Immutable Data
ParentOfWeakness BaseWeakness BaseWeakness Base305Authentication Bypass by Primary Weakness
ParentOfWeakness VariantWeakness VariantWeakness Variant593Authentication Bypass: OpenSSL CTX Object Modified after SSL Objects are Created
PeerOfWeakness BaseWeakness BaseWeakness Base603Use of Client-Side Authentication
Back to top
Page Last Updated: April 22, 2008
 

CWE is sponsored by the National Cyber Security Division of the U.S. Department of Homeland Security.

This Web site is hosted by The MITRE Corporation.
Copyright 2008, The MITRE Corporation. CWE and the CWE logo are trademarks of The MITRE Corporation.

Contact cwe@mitre.org for more information.
Privacy policy
Terms of use
Contact us