CWE-305

Base Abstraction Level
Pillar — Highest-level weakness category
Class — Abstract, language-independent
Base — Specific enough to detect
Variant — Tied to specific technology
Compound — Requires multiple weaknesses Draft MITRE CWE Status
Stable — Fully reviewed and complete
Draft — Under development, may change
Incomplete — Partially defined by MITRE
Deprecated — No longer recommended
Obsolete — Replaced by another CWE
Authentication Bypass by Primary Weakness

Description

The authentication algorithm is sound, but the implemented mechanism can be bypassed as the result of a separate weakness that is primary to the authentication error.

Top Monitored CVEs

CVE-2025-31161
CRITICAL KEV
9.8 99.9%
2025-04-03
CVE-2024-37085
HIGH KEV
7.2 26.8%
2024-06-25
CVE-2021-26102
CRITICAL
9.1 16.4%
2024-12-19
CVE-2024-1403
CRITICAL
9.8 3.3%
2024-02-27
CVE-2024-50478
CRITICAL
9.8 1.1%
2024-10-28

Consequences

Access Control — Bypass Protection Mechanism