Base weakness
Draft
CWE-308: Use of Single-factor Authentication
The product uses an authentication algorithm that uses a single factor (e.g., a password) in a security context that should require more than one factor.
Last updated
13
Recorded CVEs
With this primary weakness
0
KEVs
In the CISA KEV catalog
High
Likelihood of exploit
Per MITRE
Base
Abstraction
MITRE classification
Overview
CWE-308 (Use of Single-factor Authentication) is a base-level software weakness catalogued by MITRE in the Common Weakness Enumeration (CWE). It describes a recurring type of mistake that can lead to exploitable security vulnerabilities.
Real-world CVEs
13 recorded CVEs are caused by CWE-308 (Use of Single-factor Authentication). The highest-severity and most recent are shown first. 7 new CWE-308 CVEs have been recorded so far in 2026 (1 in 2025).