Skip to content
OpenAdvisories

Weakness (CWE)

CWE-260: Password in Configuration File

Base Incomplete

The product stores a password in a configuration file that might be accessible to actors who do not know the password.

How to prevent it (2 mitigations)

  1. Architecture and Design

    Avoid storing passwords in easily accessible locations.

  2. Architecture and Design

    Consider storing cryptographic hashes of passwords as an alternative to storing in plaintext.

Source: MITRE CWE-260

All Critical High Medium Low Exploited only Public exploit

0 results · Clear filters · Feed

Nothing found.