1. Home
  2. Weaknesses
  3. CWE-555

CWE-555: J2EE Misconfiguration: Plaintext Password in Configuration File

ID CWE-555
Abstraction Variant
Structure Simple
Status Draft
Number of CVEs 1
Detail Dashboard Vulnerabilities Web & Social
The J2EE application stores a plaintext password in a configuration file.

Storing a plaintext password in a configuration file allows anyone who can read the file to access the password-protected resource, making it an easy target for attackers.

Modes of Introduction

Phase Note
Architecture and Design
Implementation

Relationships

View Weakness
# ID View Status # ID Name Abstraction Structure Status
CWE-1000 Research Concepts Draft CWE-260 Password in Configuration File Base Simple Incomplete

CVEs Published

Based on CVE published date

CVSS Severity

CVSS Severity - By Year

CVSS Base Score

# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date