Vulnerabilities > Missing Critical Step in Authentication