CWE-304: Missing Critical Step in Authentication, page 2

Filter

The product implements an authentication technique, but it skips a step that weakens the technique.

What the weakness is: CWE-304 at MITRE. OWASP Top 10: A07:2025 Authentication Failures

Ask an AI about CWE-304

Show the prompt

Explain CWE-304: Missing Critical Step in Authentication and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/304.html and https://cve.bz/cve/cwe/304?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

9.8CVE-2011-3172EPSS 1.0%2018-06-08
A vulnerability in pam_modules of SUSE Linux Enterprise allows attackers to log into accounts that should have been disabled. Affected releases are SUSE Linux Enterprise: versions prior to 12.