CWE-258 - Empty Password in Configuration File
- Abstraction:Variant
- Structure:Simple
- Status:Incomplete
- Release Date:2006-07-19
- Latest Modification Date:2023-10-26
Weakness Name
Empty Password in Configuration File
Description
Using an empty string as a password is insecure.
Common Consequences
Scope: Access Control
Impact: Gain Privileges or Assume Identity