The product uses an authentication algorithm that uses a single factor (e.g., a password) in a security context that should require more than one factor.