Storing Passwords in a Recoverable Format

Opis

The storage of passwords in a recoverable format makes them subject to password reuse attacks by malicious users. In fact, it should be noted that recoverable encrypted passwords provide no significant benefit over plaintext passwords since they are subject not only to reuse by malicious attackers but also by malicious insiders. If a system administrator can recover a password directly, or use a brute force search on the available information, the administrator can use the password on other accounts.

Skutki

• Confidentiality, Access Control

  Gain Privileges or Assume Identity

  User's passwords may be revealed.

• Access Control

  Gain Privileges or Assume Identity

  Revealed passwords may be reused elsewhere to impersonate the users in question.

Zapobieganie

• Architecture and Design

  Use strong, non-reversible encryption to protect stored passwords.

Przykłady podatności

• CVE-2022-30018 A messaging platform serializes all elements of User/Group objects, making private information available to adversaries

Słabość nadrzędna

• CWE-522 Insufficiently Protected Credentials

Pokrewna

• CWE-259 Use of Hard-coded Password

Kiedy powstaje

• Architecture and Design — COMMISSION: This weakness refers to an incorrect design related to an architectural security tactic.

Dotyczy

Not Language-Specific

Uwagi

The meaning of this entry needs to be investigated more closely, especially with respect to what is meant by "recoverable."

Źródła

1. The CLASP Application Security Process — Secure Software, Inc., 2005