Security

Authentication Bypass by Spoofing

Authentication bypass by spoofing (CWE-290) is a weakness where software accepts a forgeable value, such as a source IP address or header, as proof of identity, letting an attacker impersonate a trusted caller.

Deep dive

Learn Article

What Is a Localhost Authentication Bypass?

A localhost authentication bypass lets remote attackers pose as local users. Learn how reverse proxies and spoofed IP headers break loopback trust.

beginner 4 min read

Back to glossary