CWE-255 · Kategoria
Credentials Management Errors
- Status
- Szkic
- Dodano
- 19 lipca 2006
- Ostatnia zmiana
- 29 czerwca 2023
Opis
Weaknesses in this category are related to the management of credentials.
Wpisy w tej grupie
- CWE-256 Plaintext Storage of a Password
- CWE-257 Storing Passwords in a Recoverable Format
- CWE-260 Password in Configuration File
- CWE-261 Weak Encoding for Password
- CWE-262 Not Using Password Aging
- CWE-263 Password Aging with Long Expiration
- CWE-324 Use of a Key Past its Expiration Date
- CWE-521 Weak Password Requirements
- CWE-523 Unprotected Transport of Credentials
- CWE-549 Missing Password Field Masking
- CWE-620 Unverified Password Change
- CWE-640 Weak Password Recovery Mechanism for Forgotten Password
- CWE-798 Use of Hard-coded Credentials
- CWE-916 Use of Password Hash With Insufficient Computational Effort
- CWE-1392 Use of Default Credentials
Źródła
Wpis z katalogu CWE 4.20.