Authentication Weaknesses
High · Authentication · OWASP A07:2021 · CWE-287
Description
Weak login, password and session mechanisms.
Root cause
No rate limiting, weak passwords, no MFA.
Impact
Account takeover.
Detection
Failed-login spikes in logs.
Mitigation
MFA, rate limiting, strong password policies.
Secure coding
Use proven auth libraries; hash with Argon2/bcrypt.
Safe lab example
DVWA Brute Force module
Practise related skills in Labs or deepen on Academy library.