Skip to content
OpenAdvisories

Weakness (CWE)

CWE-308: Use of Single-factor Authentication

Base Draft

The product uses an authentication algorithm that uses a single factor (e.g., a password) in a security context that should require more than one factor.

How to prevent it (1 mitigation)

  1. Architecture and Design

    Use multiple independent authentication schemes, which ensures that -- if one of the methods is compromised -- the system itself is still likely safe from compromise. For this reason, if multiple schemes are possible, they should be implemented and required -- especially if they are easy to use.

Source: MITRE CWE-308

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-58240

    Missing Authentication check in SAP NetWeaver (Message Server)

    SAP NetWeaver Message Server does not sufficiently validate the authenticity of internal application server components during registration. An unauthenticated attacker with network access to the affected service could exploit this weakness to register an unau…

    SAP SAP NetWeaver (Message Server)
  • Critical 9.1
    CVE-2026-15616

    Local MFA not enforced during SSO sign-in

    Logto does not enforce locally configured MFA during SSO authentication, allowing users to bypass second-factor requirements and grants unauthorized access.

    Logto Logto