CWE-304 Missing Critical Step in Authentication
baseThe product implements an authentication technique, but it skips a step that weakens the technique.
01
parent weaknesses
Broader classes this is a kind of.
02
vulnerabilities (57)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-54391US | critical9.8 | Exploit | ||
Proxmox Virtual Environment (VE) 7.0 through 8.0 contains an authentication bypass vulnerability in libpve-access-control before 8.0.4 that allows unauthenticated attackers to auth… | ||||
| CVE-2015-5600US | high8.5 | Exploit | ||
The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processing of keyboard-interactive devices within a single connection… | ||||
| CVE-2022-2302US | critical9.8 | — | ||
Multiple Lenze products of the cabinet series skip the password verification upon second login. After a user has been logged on to the device once, a remote attacker can get full a… | ||||
| CVE-2026-89068US | critical9.8 | — | ||
Missing critical step in authentication vulnerability in Progress MOVEit Transfer (LDAP module).
This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.… | ||||
| CVE-2026-30831US | critical9.8 | — | ||
Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to versions 7.10.8, 7.11.5, 7.12.5, 7.13.4, 8.0.2, 8.1.1, and 8.2.0, authentication vulnera… | ||||
| CVE-2025-24322US | critical9.8 | — | ||
An unsafe default authentication vulnerability exists in the Initial Setup Authentication functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted network request can lea… | ||||
| CVE-2024-45764US | critical9.8 | — | ||
Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) a Missing Critical Step in Authentication vulnerability. An unauthenticated attacker with remote access could potentia… | ||||
| CVE-2021-4236US | critical9.8 | — | ||
Web Sockets do not execute any AuthenticateMethod methods which may be set, leading to a nil pointer dereference if the returned UserData pointer is assumed to be non-nil, or authe… | ||||
| CVE-2011-3172US | critical9.8 | — | ||
A vulnerability in pam_modules of SUSE Linux Enterprise allows attackers to log into accounts that should have been disabled. Affected releases are SUSE Linux Enterprise: versions… | ||||
| CVE-2022-1065US | high8.8 | — | ||
A vulnerability within the authentication process of Abacus ERP allows a remote attacker to bypass the second authentication factor. This issue affects: Abacus ERP v2022 versions p… | ||||
| CVE-2019-16766US | high8.8 | — | ||
When using wagtail-2fa before 1.3.0, if someone gains access to someone's Wagtail login credentials, they can log into the CMS and bypass the 2FA check by changing the URL. They ca… | ||||
| CVE-2022-40622US | high8.8 | — | ||
The WAVLINK Quantum D4G (WN531G3) running firmware version M31G3.V5030.200325 uses IP addresses to hold sessions and does not not use session tokens. Therefore, if an attacker chan… | ||||
| CVE-2022-2031US | high8.8OT elevated | — | ||
A flaw was found in Samba. The security vulnerability occurs when KDC and the kpasswd service share a single account and set of keys, allowing them to decrypt each other's tickets.… | ||||
| CVE-2015-7974US | high7.7 | — | ||
NTP 4.x before 4.2.8p6 and 4.3.x before 4.3.90 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct imperson… | ||||
| CVE-2026-76207US | high8.1 | — | ||
phpMyFAQ before 4.1.7 contains a two-factor authentication bypass vulnerability where remember-me tokens are issued before 2FA verification completes. Attackers with valid credenti… | ||||
| CVE-2024-7745US | high8.1 | — | ||
In WS_FTP Server versions before 8.8.8 (2022.0.8), a Missing Critical Step in Multi-Factor Authentication of the Web Transfer Module allows users to skip the second-factor verifica… | ||||
| CVE-2024-12136US | high7.8 | — | ||
Missing Critical Step in Authentication vulnerability in Elfatek Elektronics ANKA JPD-00028 allows Authentication Bypass.
This issue affects ANKA JPD-00028: before V.01.01. | ||||
| CVE-2022-2821US | high7.5 | — | ||
Missing Critical Step in Authentication in GitHub repository namelessmc/nameless prior to v2.0.2. | ||||
| CVE-2022-3916US | medium6.8 | — | ||
A flaw was found in the offline_access scope in Keycloak. This issue would affect users of shared computers more (especially if cookies are not cleared), due to a lack of root sess… | ||||
| CVE-2025-43798US | medium6.5 | — | ||
Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92 and 7.3 GA through update 35 allows a time-based one-time password (TOTP) to be used multiple times dur… | ||||
03
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan