Authentication Bypass

A flaw that allows access to protected resources without providing valid credentials, for example by manipulating an HTTP header, a request parameter, or a token. An authentication bypass is critical because it nullifies the entire access-control layer. In multi-tenant SaaS applications, it directly exposes every customer's data.