CWE-522—Insufficiently Protected Credentials

PUBLISHEDweakness record
released 2006-07-19 · last modified 2025-12-11

Metadata

CWE ID：
CWE-522
摘要：
Class
结构：
Simple
状态：
Incomplete
发布日期：
2006-07-19
更新日期：
2025-12-11

名称

Insufficiently Protected Credentials

描述

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

常见后果

范围：
Access Control
影响：
Gain Privileges or Assume Identity
注释：
An attacker could gain access to user accounts and access sensitive data used by the user accounts.

相关 CWE

browse all CWEs