702
Observed Examples
Reference Description
CVE-2000-1179 Router allows remote attackers to read system logs without authentication by
directly connecting to the login screen and typing certain control characters.
https://www.cve.org/CVERecord?id=CVE-2000-1179
CVE-1999-1454 Attackers with physical access to the machine may bypass the password
prompt by pressing the ESC (Escape) key.
https://www.cve.org/CVERecord?id=CVE-1999-1454
CVE-1999-1077 OS allows local attackers to bypass the password protection of idled sessions
via the programmer's switch or CMD-PWR keyboard sequence, which brings
up a debugger that the attacker can use to disable the lock.
https://www.cve.org/CVERecord?id=CVE-1999-1077
CVE-2003-0304 Direct request of installation file allows attacker to create administrator
accounts.
https://www.cve.org/CVERecord?id=CVE-2003-0304
CVE-2002-0870 Attackers may gain additional privileges by directly requesting the web
management URL.
https://www.cve.org/CVERecord?id=CVE-2002-0870
CVE-2002-0066 Bypass authentication via direct request to named pipe.
https://www.cve.org/CVERecord?id=CVE-2002-0066
CVE-2003-1035 User can avoid lockouts by using an API instead of the GUI to conduct brute
force password guessing.
https://www.cve.org/CVERecord?id=CVE-2003-1035
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 721 OWASP Top Ten 2007 Category A10 - Failure to
Restrict URL Access
629 2333
MemberOf 947 SFP Secondary Cluster: Authentication Bypass 888 2394
MemberOf 1353 OWASP Top Ten 2021 Category A07:2021 -
Identification and Authentication Failures
1344 2494
MemberOf 1364 ICS Communications: Zone Boundary Failures 1358 2501
MemberOf 1396 Comprehensive Categorization: Access Control 1400 2519
Notes
Relationship
overlaps Unprotected Alternate Channel
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
PLOVER Authentication Bypass by Alternate
Path/Channel
OWASP Top Ten 2007 A10 CWE More Specific Failure to Restrict URL Access
Related Attack Patterns
CAPEC-ID Attack Pattern Name
127 Directory Indexing
665 Exploitation of Thunderbolt Protection Flaws
CWE Version 4.14
CWE-289: Authentication Bypass by Alternate Name
CWE-289: Authentication Bypass by Alternate Name