This CWE entry focuses on vulnerabilities related to identification and authentication failures in the latest OWASP Top Ten. Explore more about weaknesses in this category.

CWE-1344: Hierarchical Connections in Graph with OWASP Top Ten

CWE-255: Authorization Administration Weaknesses

CWE-259: Hard-Coded Password

CWE-287: Authentication Issues

CWE-288: Authentication Bypass Using Alternate Channel

CWE-290: Applicable Mapping of Vulnerabilities

CWE-294: Design Message Authentication Mechanism

CWE-295: Identification and Authentication Failures

CWE-297: Improper Validation of Host-specific Certificate Data

CWE-300: Channel Accessible by Non-Endpoint ('Man-in-the-Middle')

CWE-302: Authentication Bypass by Assumed Immutable Data

CWE-304: OWASP Top Ten 2004 Category A3 - Broken Authentication and Session Management

CWE-306: Missing Authentication for Critical Function

CWE-307: Improper Restriction of Excessive Authentication Attempts

CWE-346: Insufficient Verification of Data Authenticity in Faulty Endpoint Authentication

CWE-384: Session Fixation

CWE-521: Weak Password Requirements

CWE-613: Insufficient Session Expiration

CWE-620: Weak Password Recovery Mechanism for Forgotten Password

CWE-640: Weak Password Recovery Mechanism

CWE-798: Vulnerability in Authentication Mechanisms

CWE-940: Identification and Authentication Failures

CWE-1216: Software System Lockout Mechanism Drawbacks

Discover vulnerabilities in the identification and authentication failures category with CWE 1353. Learn about weaknesses in the latest OWASP Top Ten 2021.

CWE 1353: Identification and Authentication Failures - OWASP Top Ten

The vulnerabilities within this specific classification pertain to the A07 classification named "Identification and Authentication Failures" in the latest version of the OWASP Top Ten, released in 2021.

CWE-1353: Identification and Authentication Failures

CWE-1353: Identification and Authentication Failures

Summary

Is your System Free of Underlying Vulnerabilities?
Find Out Now

CWE-1353: Identification and Authentication Failures

Summary

Is your System Free of Underlying Vulnerabilities? Find Out Now

Is your System Free of Underlying Vulnerabilities?
Find Out Now