Common Weakness Enumeration

    CWE Definition / CWE-309

    CWE-309: Use of Password System for Primary Authentication

    The use of password systems as the primary means of authentication may be subject to several flaws or shortcomings, each reducing the effectiveness of the mechanism.

    Published:19 Jul 2006
    Organization:MITRE
    Modified:11 Dec 2025

    Related Weakness

    CWE-1390: Weak Authentication

    CWE-654: Reliance on a Single Factor in a Security Decision

    CWE-308: Use of Single-factor Authentication