CWE-303

Incorrect Implementation of Authentication Algorithm

Base

Draft

The requirements for the product dictate the use of an established authentication algorithm, but the implementation of the algorithm is incorrect.

This incorrect implementation may allow authentication to be bypassed.

Parent Weaknesses (ChildOf)

Scope

Access Control

Impact

Bypass Protection Mechanism

Conditional should have been an 'or' not an 'and'.

Not Language-Specific

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.