CWE-1188: Initialization of a Resource with an Insecure Default
The product initializes or sets a resource with a default that is intended to be changed by the product's installer, administrator, or maintainer, but the default is not secure.
A kind of CWE-1419 Incorrect Initialization of Resource.
From the CWE List. © The MITRE Corporation.
Newest
- cisco elastic services controllerA vulnerability in Cisco Elastic Services Controllers could allow an authenticated, remote...8.8 High
- broadcom spring web flowInsecure Default Initialization of Resource in Pivotal Spring Web Flow5.9 Medium
- ceragon fiberair ip-10 firmwareCeragon FibeAir IP-10 wireless radios through 7.2.0 have a default password of mateidu for the...7.3 High
- tp-link c20i firmware, c2 firmware +1 morevsftpd on TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n...9.8 Critical
- zyxel wre6505 firmwareZyxel WRE6505 devices have a default TELNET password of 1234 for the root and admin accounts,...10.0 Critical
- cisco aironet access point firmwareA vulnerability in Cisco Aironet 1830 Series and Cisco Aironet 1850 Series Access Points running...9.8 Critical
- schneider-electric tableau server, wonderware intelligence, tableau desktop +2 moreAn issue was discovered in Schneider Electric Tableau Server/Desktop Versions 7.0 to 10.1.3 in...9.8 Critical
- schneider-electric wonderware historianAn issue was discovered in Schneider Electric Wonderware Historian 2014 R2 SP1 P01 and earlier....7.3 High
- wordpresswp-mail.php in WordPress before 4.7.1 might allow remote attackers to bypass intended posting...5.3 Medium
- openstack folsom, grizzly, havana +1 more +3 moreOpenStack Nova uses insecure keystone middleware tmpdir by default2.1 Low