CWE-308 (使用单一因素认证机制) — Vulnerability Class 19

CWE-308 represents a critical authentication weakness where systems rely on a single credential, such as a password, for access control in contexts demanding higher assurance. Attackers typically exploit this vulnerability by employing brute-force attacks, credential stuffing, or phishing to steal the solitary factor, thereby gaining unauthorized entry without needing to bypass additional security layers. This single point of failure significantly lowers the barrier for malicious actors to compromise user accounts and sensitive data. To mitigate this risk, developers must implement multi-factor authentication (MFA) solutions that require two or more distinct verification methods, such as combining something the user knows with something they have or are. By integrating diverse factors, organizations ensure that compromising one element does not result in total system breach, thereby substantially enhancing overall security posture and resilience against common credential-based attacks.