CWE-549—Missing Password Field Masking

PUBLISHEDweakness record
released 2006-07-19 · last modified 2026-04-30

Metadata

CWE ID：
CWE-549
摘要：
Base
结构：
Simple
状态：
Draft
发布日期：
2006-07-19
更新日期：
2026-04-30

名称

Missing Password Field Masking

描述

The product does not mask passwords during entry, increasing the potential for attackers to observe and capture passwords.

常见后果

范围：
Access Control
影响：
Bypass Protection Mechanism

相关 CWE

browse all CWEs