CWE-523—Unprotected Transport of Credentials

PUBLISHEDweakness record

released 2006-07-19 · last modified 2025-12-11

Metadata

CWE ID:: CWE-523
Abstraction:: Base
Structure:: Simple
Status:: Incomplete
Release Date:: 2006-07-19
Latest Modification Date:: 2025-12-11

Weakness Name

Unprotected Transport of Credentials

Description

Login pages do not use adequate measures to protect the user name and password while they are in transit from the client to the server.

Common Consequences

Scope:: Access Control
Impact:: Gain Privileges or Assume Identity

Related Weaknesses

browse all CWEs