Common Weakness Enumeration
CWE-286 Incorrect User Management
Description
The product does not properly manage a user within its environment.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-286 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-87x6-8m9v-g8c2 | CVE-2024-29296 | MODERATE |
Portainer CE allows username enumeration through authentication response timing |
2026-09-30 | |
| GHSA-m6hq-f4w9-qrjj | CVE-2025-64725 | LOW |
Weblate has improper validation upon invitation acceptance |
2025-12-17 | |
| GHSA-xr73-jq5p-ch8r | CVE-2025-64521 | MODERATE |
authentik allows a deactivated Service account to authenticate to OAuth |
2025-11-19 | |
| GHSA-9wj2-4hcm-r74j | CVE-2025-59943 | HIGH | - |
phpMyFAQ duplicate email registration allows multiple accounts with the same email |
2025-10-13 |
| GHSA-4gfw-wf7c-w6g2 | CVE-2024-9312 | MODERATE |
Authd allows attacker-controlled usernames to yield controllable UIDs |
2024-10-10 |