CWE-308
Use of Single-factor Authentication
The product uses an authentication algorithm that uses a single factor (e.g., a password) in a security context that should require more than one factor.
Impactr finds and proves whether CWE-308 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.