CWE-304Missing Critical Step in Authentication

Description

The product implements an authentication technique, but it skips a step that weakens the technique.

Common consequences

• Access Control,Integrity,Confidentiality→Bypass Protection Mechanism,Gain Privileges or Assume Identity,Read Application Data,Execute Unauthorized Code or Comman
  This weakness can lead to the exposure of resources or functionality to unintended actors, possibly providing attackers with sensitive information or allowing attackers to execute arbitrary code.

Related CWEs

Recent CVEs classified under this CWE