741
Reference Description
https://www.cve.org/CVERecord?id=CVE-2001-0088
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 947 SFP Secondary Cluster: Authentication Bypass 888 2394
MemberOf 1396 Comprehensive Categorization: Access Control 1400 2519
Notes
Relationship
Most "authentication bypass" errors are resultant, not primary.
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
PLOVER Authentication Bypass by Primary
Weakness
CWE-306: Missing Authentication for Critical Function
Weakness ID : 306
Structure : Simple
Abstraction : Base
Description
The product does not perform any authentication for functionality that requires a provable user
identity or consumes a significant amount of resources.
Extended Description
As data is migrated to the cloud, if access does not require authentication, it can be easier for
attackers to access the data from anywhere on the Internet.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 287 Improper Authentication 692
ParentOf 288 Authentication Bypass Using an Alternate Path or Channel 700
ParentOf 322 Key Exchange without Entity Authentication 788
Relevant to the view "Weaknesses for Simplified Mapping of Published
Vulnerabilities" (CWE-1003)
Nature Type ID Name Page
ChildOf 287 Improper Authentication 692
Relevant to the view "Architectural Concepts" (CWE-1008)
CWE Version 4.14
CWE-306: Missing Authentication for Critical Function
CWE-306: Missing Authentication for Critical Function