Description The clear-text passwords are in the configuration files. Clear-text passwords in the configuration files are subject to exposure in a...

Overview Allowing password aging to occur unchecked can result in the possibility of diminished password integrity. Consequences ...

Abstract Using an empty string as a password is insecure. Description It is never appropriate to use an empty string as a password. It is too...

Overview If no mechanism is in place for managing password aging, users will have no incentive to update passwords in a timely...

Abstract Hardcoded passwords may compromise system security in a way that cannot be easily remedied. Description It is never a good idea to...

Abstract Obscuring a password with a trivial encoding does not protect the password. Description Password management issues occur when a...

Abstract Storing a password in plaintext may result in a system compromise. Description Password management issues occur when a password is...

Overview The use of password systems as the primary means of authentication may be subject to several flaws or shortcomings, each reducing the...