Vulnerabilities that allow attackers to bypass authentication functions. Examples Allow an attacker to login without having a valid set of credentials Allow a normal user to become an administrator without having the privileges to do so.