← Back
CWE-287

5,225 CVEs • Abstraction: Class • Likelihood of Exploit: High

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

JSON object

Loading...

CVEs (5,225)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2001-1585
1Openbsd
1Openssh
Apr 16, 2026
Dec 31, 2001
N/A· v4
N/A· v3
6.8 MEDIUM· v2
SSH protocol 2 (aka SSH-2) public key authentication in the development snapshot of OpenSSH 2.3.1, available from 2001-01-18 through 2001-02-08, does not perform a challenge-response step to ensure that the client has th...Show more
SSH protocol 2 (aka SSH-2) public key authentication in the development snapshot of OpenSSH 2.3.1, available from 2001-01-18 through 2001-02-08, does not perform a challenge-response step to ensure that the client has the proper private key, which allows remote attackers to bypass authentication as other users by supplying a public key from that user's authorized_keys file.Show less
CVE-2001-0537
1Cisco
1Ios
Apr 16, 2026
Jul 21, 2001
N/A· v4
N/A· v3
9.3 HIGH· v2
HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access level in the URL.
CVE-1999-0987
1Microsoft
1Windows Nt
Apr 16, 2026
Nov 18, 1999
N/A· v4
N/A· v3
10.0 HIGH· v2
Windows NT does not properly download a system policy if the domain user logs into the domain with a space at the end of the domain name.
CVE-1999-0680
1Microsoft
1Terminal Server
Apr 16, 2026
Aug 9, 1999
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Windows NT Terminal Server performs extra work when a client opens a new connection but before it is authenticated, allowing for a denial of service.
CVE-1999-0366
1Microsoft
1Windows Nt
Apr 16, 2026
Feb 8, 1999
N/A· v4
N/A· v3
7.5 HIGH· v2
In some cases, Service Pack 4 for Windows NT 4.0 can allow access to network shares using a blank password, through a problem with a null NT hash value.