CWE-303

Base Abstraction Level
Pillar — Highest-level weakness category
Class — Abstract, language-independent
Base — Specific enough to detect
Variant — Tied to specific technology
Compound — Requires multiple weaknesses Draft MITRE CWE Status
Stable — Fully reviewed and complete
Draft — Under development, may change
Incomplete — Partially defined by MITRE
Deprecated — No longer recommended
Obsolete — Replaced by another CWE
Incorrect Implementation of Authentication Algorithm

Description

The requirements for the product dictate the use of an established authentication algorithm, but the implementation of the algorithm is incorrect.

This incorrect implementation may allow authentication to be bypassed.

Top Monitored CVEs

CVE-2024-7593
CRITICAL KEV
9.8 100.0%
2024-08-13
CVE-2023-29357
CRITICAL KEV
9.8 99.6%
2023-06-13
CVE-2022-20695
CRITICAL
10.0 19.9%
2022-04-15
CVE-2025-21311
CRITICAL
9.8 2.3%
2025-01-14
CVE-2025-57808
HIGH
8.1 1.5%
2025-09-02

Consequences

Access Control — Bypass Protection Mechanism