CWE · MITRE source
CWE-304Missing Critical Step in Authentication
The product implements an authentication technique, but it skips a step that weakens the technique.
Authentication techniques should follow the algorithms that define them exactly, otherwise authentication can be bypassed or more easily subjected to brute force attacks.
Last updated: 09 May 2026 03:25 UTC
NIST 800-53 r5 controls that address this weakness (1)AI
| Control | Title | Family | Why it addresses this CWE |
|---|---|---|---|
IA-8 | Identification and Authentication (Non-organizational Users) | IA | Ensures the authentication process is followed for non-organizational users, avoiding missing critical steps. |
Top CVEs of this weakness type, ranked by Risk Priority
| CVE | Risk | CVSS | EPSS | Published |
|---|---|---|---|---|
CVE-2022-2302 | 2.0 | 9.8 | 0.0068 | 2022-07-11 |
CVE-2024-2172 | 2.0 | 9.8 | 0.0112 | 2024-03-13 |
CVE-2024-8954 | 2.0 | 9.8 | 0.0026 | 2025-03-20 |
CVE-2026-30831 | 2.0 | 9.8 | 0.0008 | 2026-03-06 |
CVE-2022-40622 | 1.8 | 8.8 | 0.0010 | 2022-09-13 |
CVE-2024-45764 | 1.8 | 9.0 | 0.0010 | 2024-11-08 |
CVE-2024-12048 | 1.8 | 8.8 | 0.0021 | 2025-03-20 |
CVE-2019-16766 | 1.7 | 8.7 | 0.0016 | 2019-11-29 |
CVE-2022-1065 | 1.7 | 8.1 | 0.0169 | 2022-04-19 |
CVE-2024-11302 | 1.6 | 8.0 | 0.0008 | 2025-03-20 |
CVE-2024-9216 | 1.6 | 8.1 | 0.0017 | 2025-03-20 |
CVE-2025-24322 | 1.6 | 8.1 | 0.0009 | 2025-08-20 |
CVE-2022-2821 | 1.5 | 7.5 | 0.0029 | 2022-08-15 |
CVE-2023-22833 | 1.5 | 7.6 | 0.0006 | 2023-06-06 |
CVE-2023-52424 | 1.5 | 7.4 | 0.0021 | 2024-05-17 |
CVE-2024-20153 | 1.5 | 7.5 | 0.0068 | 2025-01-06 |
CVE-2025-55138 | 1.5 | 7.4 | 0.0005 | 2025-08-07 |
CVE-2026-40542 | 1.5 | 7.3 | 0.0010 | 2026-04-22 |
CVE-2024-12136 | 1.4 | 6.9 | 0.0001 | 2025-03-19 |
CVE-2024-52965 | 1.4 | 7.2 | 0.0013 | 2025-07-08 |
CVE-2021-41179 | 1.3 | 6.5 | 0.0051 | 2021-10-25 |
CVE-2022-39360 | 1.3 | 6.5 | 0.0017 | 2022-10-26 |
CVE-2023-3628 | 1.3 | 6.5 | 0.0009 | 2023-12-18 |
CVE-2024-7745 | 1.3 | 6.5 | 0.0028 | 2024-08-28 |
CVE-2025-43798 | 1.3 | 6.5 | 0.0003 | 2025-09-15 |