CWE-288—Authentication Bypass Using an Alternate Path or Channel

PUBLISHEDweakness record
released 2006-07-19 · last modified 2025-12-11
CWE-288 - Authentication Bypass Using an Alternate Path or Channel - Diagram

Metadata

CWE ID：
CWE-288
摘要：
Base
结构：
Simple
状态：
Incomplete
发布日期：
2006-07-19
更新日期：
2025-12-11

名称

Authentication Bypass Using an Alternate Path or Channel

描述

The product requires authentication, but the product has an alternate path or channel that does not require authentication.

常见后果

范围：
Access Control
影响：
Bypass Protection Mechanism

相关 CWE

browse all CWEs