CWE-250 Execution with Unnecessary Privileges
CWE-306 Missing Authentication for Critical Function
CWE-307 Improper Restriction of Excessive Authentication Attempts
CWE-311 Missing Encryption of Sensitive Data