Knock, Knock

Identification and Authentication Failures are a category of vulnerabilities where authentication fails in a way that compromises security.

Identification and Authentication Failures are dangerous because they can allow an attacker to impersonate someone else, thus taking advantage of the privileges granted a person.

Identification and Authentication Failures can occur in various ways, but the two most significant ways are password issues and session and token issues.