CWE-521—Weak Password Requirements

PUBLISHEDweakness record
released 2006-07-19 · last modified 2025-12-11
CWE-521 - Weak Password Requirements - Diagram

Metadata

CWE ID：
CWE-521
摘要：
Base
结构：
Simple
状态：
Draft
发布日期：
2006-07-19
更新日期：
2025-12-11

名称

Weak Password Requirements

描述

The product does not require that users should have strong passwords.

常见后果

范围：
Access Control
影响：
Gain Privileges or Assume Identity
注释：
An attacker could easily guess user passwords and gain access user accounts.

相关 CWE

browse all CWEs