Skip to content
OpenAdvisories

Weakness (CWE)

CWE-1391: Use of Weak Credentials

Class Incomplete

The product uses weak credentials (such as a default key or hard-coded password) that can be calculated, derived, reused, or guessed by an attacker.

How to prevent it (1 mitigation)

  1. Architecture and Design, Operation

    When the user changes or sets a password, check
    the password against a database of already compromised or
    breached passwords. These passwords are likely to be used in
    password guessing attacks.

Source: MITRE CWE-1391

All Critical High Medium Low Exploited only Public exploit

0 results · Clear filters · Feed

Nothing found.