CWE•Variant•Incomplete•3 recent CVEs
CWE-258Empty Password in Configuration File
Description
Using an empty string as a password is insecure.
Common consequences
- Access Control→Gain Privileges or Assume Identity
Potential mitigations
- System ConfigurationPasswords should be at least eight characters long -- the longer the better. Avoid passwords that are in any way similar to other passwords you have. Avoid using words that may be found in a dictionary, names book, on a map, etc. Consider incorporating numbers and/or punctuation into your password. If you do use common words, consider replacing letters in that word with numbers and punctuation. Ho