Skip to content
OpenAdvisories

Weakness (CWE)

CWE-555: J2EE Misconfiguration: Plaintext Password in Configuration File

Variant Draft

The J2EE application stores a plaintext password in a configuration file.

How to prevent it (2 mitigations)

  1. Architecture and Design

    Do not hardwire passwords into your software.

  2. Architecture and Design

    Use industry standard libraries to encrypt passwords before storage in configuration files.

Source: MITRE CWE-555

All Critical High Medium Low Exploited only Public exploit

0 results · Clear filters · Feed

Nothing found.