Common Weakness Enumeration
CWE-603 Use of Client-Side Authentication
Description
A client/server product performs authentication within client code but not in server code, allowing server-side authentication to be bypassed via a modified client that omits the authentication check.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-603 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-g8vr-x4qh-25qg | CVE-2026-8830 | MODERATE |
Keycloak: Policy bypass during WebAuthn credential registration via client-side JavaScript manipulation |
2026-06-26 |