CWE-309
Use of Password System for Primary Authentication
The use of password systems as the primary means of authentication may be subject to several flaws or shortcomings, each reducing the effectiveness of the mechanism.
Impactr finds and proves whether CWE-309 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.