CWE-1390
Weak Authentication
The product uses an authentication mechanism to restrict access to specific users or identities, but the mechanism does not sufficiently prove that the claimed identity is correct.
Impactr finds and proves whether CWE-1390 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.