CWE-523—Unprotected Transport of Credentials

PUBLISHEDweakness record
released 2006-07-19 · last modified 2025-12-11

Metadata

CWE ID：
CWE-523
摘要：
Base
结构：
Simple
状态：
Incomplete
发布日期：
2006-07-19
更新日期：
2025-12-11

名称

Unprotected Transport of Credentials

描述

Login pages do not use adequate measures to protect the user name and password while they are in transit from the client to the server.

常见后果

范围：
Access Control
影响：
Gain Privileges or Assume Identity

相关 CWE

browse all CWEs