Language: PHP
Label: vulnerable
CWE: NVD-CWE-Other \u2014 Other
NVD is only using a subset of CWE for mapping instead of the entire CWE, and the weakness type is not covered by that subset.

Code:
                                $user = cmsCore::getModel('users')->getUserByAuth($profile['email'], $value);

                                if (!$user){
                                    return LANG_OLD_PASS_INCORRECT;
                                }

                                return true;

                            })
                        )
                    )),