Common Weakness Enumeration

    CWE Definition / CWE-603

    CWE-603: Use of Client-Side Authentication

    A client/server product performs authentication within client code but not in server code, allowing server-side authentication to be bypassed via a modified client that omits the authentication check.

    Published:7 May 2007
    Organization:MITRE
    Modified:11 Dec 2025

    Related Weakness

    CWE-1390: Weak Authentication

    CWE-602: Client-Side Enforcement of Server-Side Security

    CWE-300: Channel Accessible by Non-Endpoint

    CWE-656: Reliance on Security Through Obscurity