CWE-304: Missing Critical Step in Authentication
The product implements an authentication technique, but it skips a step that weakens the technique.
A kind of CWE-303 Incorrect Implementation of Authentication Algorithm.
From the CWE List. © The MITRE Corporation.
Newest
- namelessmc nameless, namelessmc/nameless +1 moreMissing Critical Step in Authentication in namelessmc/nameless9.8 Critical
- lenze c520 firmware, c550 firmware, c750 firmware +3 more +5 moreLENZE: Missing password verification in authorisation procedure9.8 Critical
- abacus research ag erp, abacus erp 2018, erp 2019 +3 more +5 moreMulti Factor Authentication Bypass in various versions of Abacus ERP8.1 High
- nextcloud server, kiteworks security-advisories +1 moreTwo-Factor Authentication not enforced for pages marked as public6.5 Medium
- github.com/ecnepsnai/web, web project web +1 morePanic or authentication bypass in github.com/ecnepsnai/web9.8 Critical
- lab digital wagtail-2fa2FA bypass in Wagtail through new device path8.7 High
- suse linux enterprise, linux enterprise server +1 moreunix2_chkpwd do not check for a valid account5.4 Medium