A feature or defect of a system, application or service that allows attackers to bypass security measures.