CWE-308—Use of Single-factor Authentication

名称

Use of Single-factor Authentication

描述

The product uses an authentication algorithm that uses a single factor (e.g., a password) in a security context that should require more than one factor.

常见后果

范围：

Access Control

影响：

Bypass Protection Mechanism

注释：

If the secret in a single-factor authentication scheme gets compromised, full authentication is possible.

相关 CWE

• CWE-309Use of Password System for Primary AuthenticationHigh
• CWE-654Reliance on a Single Factor in a Security Decision
• CWE-1390Weak Authentication