Weakness (CWE)
CWE-549: Missing Password Field Masking
Base Draft
The product does not mask passwords during entry, increasing the potential for attackers to observe and capture passwords.
How to prevent it (1 mitigation)
-
Implementation, Requirements
Recommendations include requiring all password fields in your web application be masked to prevent other users from seeing this information.
Source: MITRE CWE-549
0 results · Clear filters · Feed
Nothing found.