Rank 14 in the 2024 CWE Top 25 (frequency x severity of CVEs). When an actor claims to have a given identity, the software does not prove or insufficiently proves that the claim is correct.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.