CWE-13—ASP.NET Misconfiguration: Password in Configuration File

PUBLISHEDweakness record
released 2006-07-19 · last modified 2025-12-11

Metadata

CWE ID：
CWE-13
摘要：
Variant
结构：
Simple
状态：
Draft
发布日期：
2006-07-19
更新日期：
2025-12-11

名称

ASP.NET Misconfiguration: Password in Configuration File

描述

Storing a plaintext password in a configuration file allows anyone who can read the file access to the password-protected resource making them an easy target for attackers.

常见后果

范围：
Access Control
影响：
Gain Privileges or Assume Identity

相关 CWE

browse all CWEs