Skip to content
OpenAdvisories

Weakness (CWE)

CWE-522: Insufficiently Protected Credentials

Class Incomplete

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

How to prevent it (3 mitigations)

  1. Architecture and Design

    Use an appropriate security mechanism to protect the credentials.

  2. Architecture and Design

    Make appropriate use of cryptography to protect the credentials.

  3. Implementation

    Use industry standards to protect the credentials (e.g. LDAP, keystore, etc.).

Source: MITRE CWE-522

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2014-1812 Exploited · Ransomware Public exploit EPSS 65%

    The Group Policy implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Wind…

    KEV Nov 3, 2021