The software implements an authentication technique, but it skips a step that weakens the technique.
Extended Description
Authentication techniques should follow the algorithms that define them exactly, otherwise authentication can be bypassed or more easily subjected to brute force attacks.
Time of Introduction
Architecture and Design
Implementation
Applicable Platforms
Languages
All
Common Consequences
Scope
Effect
Access Control
Integrity
Confidentiality
Technical Impact: Bypass protection
mechanism; Gain privileges / assume
identity; Read application
data; Execute unauthorized code or
commands
This weakness can lead to the exposure of resources or functionality
to unintended actors, possibly providing attackers with sensitive
information or allowing attackers to execute arbitrary code.
Description
