CWE-655
Insufficient Psychological Acceptability
The product has a protection mechanism that is too difficult or inconvenient to use, encouraging non-malicious users to disable or bypass the mechanism, whether by accident or on purpose.
Impactr finds and proves whether CWE-655 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.