Skip to content
OpenAdvisories

Weakness (CWE)

CWE-304: Missing Critical Step in Authentication

Base Draft

The product implements an authentication technique, but it skips a step that weakens the technique.

Source: MITRE CWE-304

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.1
    CVE-2025-43798

    Liferay DXP Missing Critical Step in Authentication

    Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92 and 7.3 GA through update 35 allows a time-based one-time password (TOTP) to be used multiple times during the validity period, which allows attackers with access to a user’s TOTP to…

    Liferay DXP com.liferay:com.liferay.multi.factor.authentication.timebased.otp.web Maven
  • Low 3.8
    CVE-2025-5715

    Signal App Biometric Authentication missing critical step in authentication

    A vulnerability was found in Signal App 7.41.4 on Android. It has been declared as problematic. This vulnerability affects unknown code of the component Biometric Authentication Handler. The manipulation leads to missing critical step in authentication. It is…

    Signal App