Cyber Resilience

CWE · MITRE source

CWE-305Authentication Bypass by Primary Weakness

Abstraction: Base · CVEs in our corpus: 159

The authentication algorithm is sound, but the implemented mechanism can be bypassed as the result of a separate weakness that is primary to the authentication error.

Last updated: 21 August 2026 14:15 UTC

Cumulative inbound coverage

How completely the frameworks we cross-walk collectively cover this — the verdict is the strongest single mapping (overlapping partials are not summed); breadth shows the corroboration behind it.

Collective: partial · 2 mapping(s) from 2 framework(s): STIG ubuntu 22 04 1 (partial) · STIG ubuntu 24 04 1 (partial)

See the full cumulative-coverage rollup →

OWASP Top 10 for Web (2025)

This weakness contributes to A07:2025 Authentication Failures.

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent
Stop it (NIST 800-53 / CSF Protect)
  • PR.AA-03
  • PR.PS-06
  • ID.RA-01
  • AC-3 Access Enforcement
Detect
Catch it (CSF Detect / Respond)

—

Harden
Shrink the surface (DISA STIG)
  • 5 hardening rules · 3 OS baselines
Validate
Prove the fix (OWASP ASVS)
  • V6.4.3
  • V7.2.4

NIST 800-53 r5 controls that address this weakness (0)AI-assisted

Control Title Family Why it addresses this CWE
No NIST controls proposed yet.

Top CVEs of this weakness type, ranked by Risk Priority

CVE Risk CVSS EPSS Published
CVE-2025-31161 KEV 9.99.80.99952025-04-03
CVE-2023-34124 9.39.80.46372023-07-13
CVE-2020-10923 9.18.80.84682020-07-28
CVE-2025-32011 8.89.80.27332025-05-01
CVE-2022-2651 8.49.80.15432022-08-04
CVE-2023-0777 8.49.80.15212023-02-10
CVE-2021-26102 8.49.80.16762024-12-19
CVE-2025-139158.19.80.09012025-12-26
CVE-2026-46708.09.80.05632026-04-30
CVE-2024-1403 7.910.00.03302024-02-27
CVE-2022-0547 7.89.80.03572022-03-18
CVE-2024-37085 KEV 7.86.80.25952024-06-25
CVE-2026-2652 7.88.60.18862026-05-15
CVE-2024-20674 7.78.80.17172024-01-09
CVE-2020-15787 7.69.80.01482020-09-09
CVE-2020-24683 7.69.80.01462020-12-22
CVE-2026-25555 7.69.80.01822026-06-08
CVE-2019-14910 7.59.80.01052019-12-05
CVE-2023-1307 7.59.80.01072023-03-10
CVE-2023-34137 7.59.80.01012023-07-13
CVE-2024-1202 7.59.80.00902024-03-21
CVE-2024-50478 7.59.80.01122024-10-28
CVE-2025-24522 7.510.00.00772025-05-01
CVE-2025-46801 7.59.80.00912025-05-19
CVE-2023-1833 7.49.80.00762023-04-14