Failures permitting attackers to compromise passwords, keys, or session tokens.
OWASP Foundation. (2021). OWASP Top 10:2021. https://owasp.org/Top10/