CWE-303—Incorrect Implementation of Authentication Algorithm

Weakness Name

Incorrect Implementation of Authentication Algorithm

Description

The requirements for the product dictate the use of an established authentication algorithm, but the implementation of the algorithm is incorrect.

This incorrect implementation may allow authentication to be bypassed.

Common Consequences

Scope:

Access Control

Impact:

Bypass Protection Mechanism

Related Weaknesses

• CWE-1390Weak Authentication