# Identification and Authentication Failures

Weak authentication mechanisms lead to unauthorized access.

**Common Issues:**

* Credential disclosure (e.g., leaked passwords).
* Use of common or weak credentials.
* **User Enumeration:** Exposing valid usernames through error messages or responses.
* **Authentication Before Validation:** Trusting user inputs before proper validation.
