Weakness

Authentication bypass

A flaw that lets someone in without valid credentials.

Authentication bypasses skip the login check altogether, for example through a request the server forgets to verify. On an internet-facing admin interface or VPN, that means anyone can walk in, which is why they are exploited quickly.