Weakness (CWE)
CWE-555: J2EE Misconfiguration: Plaintext Password in Configuration File
Variant Draft
The J2EE application stores a plaintext password in a configuration file.
How to prevent it (2 mitigations)
-
Architecture and Design
Do not hardwire passwords into your software.
-
Architecture and Design
Use industry standard libraries to encrypt passwords before storage in configuration files.
Source: MITRE CWE-555
2 results · Clear filters · Feed
-
Medium 6.3
An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.27 and 200.18.7.1.323, and in Ruckus ZoneDi…
-
Medium 4.3
Cisco DNA Center Information Disclosure Vulnerability
A vulnerability in the implementation of the Cisco Network Plug-and-Play (PnP) agent of Cisco DNA Center could allow an authenticated, remote attacker to view sensitive information in clear text. The attacker must have valid low-privileged user credentials. T…