Cyber Resilience

CWE · MITRE source

CWE-289Authentication Bypass by Alternate Name

Abstraction: Base · CVEs in our corpus: 38

The product performs authentication based on the name of a resource being accessed, or the name of the actor performing the access, but it does not properly check all possible names for that resource or actor.

Last updated: 21 August 2026 20:21 UTC

Cumulative inbound coverage

How completely the frameworks we cross-walk collectively cover this — the verdict is the strongest single mapping (overlapping partials are not summed); breadth shows the corroboration behind it.

Collective: mostly · 2 mapping(s) from 2 framework(s): STIG oracle linux 8 1 (mostly) · STIG rhel 7 1 (partial)

See the full cumulative-coverage rollup →

OWASP Top 10 for Web (2025)

This weakness contributes to A07:2025 Authentication Failures.

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent
Stop it (NIST 800-53 / CSF Protect)
  • PR.AA-01
  • PR.AA-03
  • PR.AA-05
  • IA-2 Identification and Authentication (Organizational Users)
Detect
Catch it (CSF Detect / Respond)

—

Harden
Shrink the surface (DISA STIG)
  • 8 hardening rules · 3 OS baselines
Validate
Prove the fix (OWASP ASVS)
  • V8.3.3
  • V10.3.2
  • V6.4.3

NIST 800-53 r5 controls that address this weakness (0)AI-assisted

Control Title Family Why it addresses this CWE
No NIST controls proposed yet.

Top CVEs of this weakness type, ranked by Risk Priority

CVE Risk CVSS EPSS Published
CVE-2024-56511 9.29.80.44462025-01-10
CVE-2021-34746 8.59.80.17662021-09-02
CVE-2023-1803 7.49.80.00772023-04-14
CVE-2025-13613 7.39.80.00482025-12-10
CVE-2026-24058 7.39.80.00542026-01-22
CVE-2026-39858 7.310.00.00482026-04-30
CVE-2026-8457 7.39.80.00402026-08-02
CVE-2025-55130 7.29.10.01662026-01-20
CVE-2026-53622 7.210.00.00292026-06-23
CVE-2026-97017.29.80.00282026-07-08
CVE-2017-16590 7.18.80.03332018-01-23
CVE-2023-20046 6.78.80.00862023-05-09
CVE-2025-29266 6.79.60.00412025-03-31
CVE-2026-44492 6.48.60.00872026-06-11
CVE-2026-50627 6.49.10.00442026-06-12
CVE-2024-55634 6.18.10.00412024-12-10
CVE-2023-3263 5.97.50.00692023-08-14
CVE-2023-41890 5.97.50.00602023-09-19
CVE-2024-51996 5.97.50.00622024-11-13
CVE-2024-2098 5.87.50.00452024-06-13
CVE-2024-11283 5.87.50.00422025-03-14
CVE-2025-41248 5.87.50.00432025-09-16
CVE-2026-108425.87.50.00312026-07-30
CVE-2025-60375 5.67.30.00262025-10-09
CVE-2026-48618 5.66.50.03232026-06-26