API2:2023 — Broken Authentication

Verified by Precogs Threat Research
OWASP API 2023Rank #2

What is API Broken Authentication?

Authentication mechanisms in APIs are often implemented incorrectly, allowing attackers to compromise authentication tokens or exploit implementation flaws to assume other user's identities.

Impact

Enables complete account takeover. API tokens are often long-lived, use insecure transmission, and lack rotation. JWT implementation flaws are particularly common.

Related CWEs

Related Resources

🔍 Related CWE Entries

🛡️ Notable Vulnerabilities

🔗 External References

Risk Overview

CategoryOWASP API 2023
Rank#2
CWEs3

Quick Links

Protect Against API2

Precogs AI continuously scans for API risks across your codebase and binaries.

Start Free Scan

How Precogs AI Addresses API2

Precogs AI identifies JWT implementation flaws, missing token validation, insecure token storage, and authentication bypass patterns in API source code and compiled applications.

Scan for API2 RisksBook a demo