CWE-13Variant

ASP.NET Misconfiguration: Password in Configuration File

Draft in the CWE catalog · 0 CVEs mapped

0
CVEs mapped
What it is

Storing a plaintext password in a configuration file allows anyone who can read the file access to the password-protected resource making them an easy target for attackers.

The record
Technical detail
CWE ID
CWE-13
Abstraction
Variant
Structure
Simple
Status
Draft
References (4)
https://samate.nist.gov/SSATTM_Content/papers/Seven%20Pernicious%20Kingdoms%20-%20Taxonomy%20of%20Sw%20Security%20Errors%20-%20Tsipenyuk%20-%20Chess%20-%20McGraw.pdfhttps://learn.microsoft.com/en-us/previous-versions/msp-n-p/ff647398(v=pandp.10)?redirectedfrom=MSDNhttps://learn.microsoft.com/en-us/previous-versions/msp-n-p/ff650304(v=pandp.10)?redirectedfrom=MSDNhttp://msdn.microsoft.com/en-us/library/89211k9b(VS.80).aspx