Skip to content
OpenAdvisories

Weakness (CWE)

CWE-261: Weak Encoding for Password

Base Incomplete

The product uses a weak or trivial encoding for a password.

How to prevent it (1 mitigation)

  1. Passwords should be encrypted with keys that are at least 128 bits in length for adequate security.

Source: MITRE CWE-261

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.1
    CVE-2025-31229

    A logic issue was addressed with improved checks. This issue is fixed in iOS 18.6 and iPadOS 18.6. Passcode may be read…

    Apple iOS and iPadOS iOS
  • Critical 9.8
    CVE-2020-10275

    RVD#2565: Weak token generation for the REST API.

    The access tokens for the REST API are directly derived from the publicly available default credentials for the web interface. Given a USERNAME and a PASSWORD, the token string is generated directly with base64(USERNAME:sha256(PASSWORD)). An unauthorized atta…

    Mobile Industrial Robots A/S MiR100