CWE-13: ASP.NET Misconfiguration: Password in Configuration File
ID
CWE-13
Abstraction
Variant
Structure
Simple
Status
Draft
Storing a plaintext password in a configuration file allows anyone who can read the file access to the password-protected resource making them an easy target for attackers.
Modes of Introduction
| Phase | Note |
|---|---|
| Architecture and Design | |
| Implementation |
Loading...