CWE•Base•Incomplete•10 recent CVEs
CWE-261Weak Encoding for Password
Description
The product uses a weak or trivial encoding for a password.
Common consequences
- Access Control→Gain Privileges or Assume Identity
Potential mitigations
- Passwords should be encrypted with keys that are at least 128 bits in length for adequate security.