CWE-258: Empty Password in Configuration File
Using an empty string as a password is insecure.
A kind of CWE-260 Password in Configuration File.
From the CWE List. © The MITRE Corporation.
Newest
- d-link dhp-w610av D-Link DHP-W610AV HNAP Login defaultvalue.xml login_prepare_hnap empty password 9.3 Critical
- carecam hmt.cm2507 firmware CareCam CM2507 Empty Password in Configuration File 8.7 High
- bull bullsequana xh3406, bullsequana xh3515 +1 more BMC root account active without password on BullSequana XH3406 and XH3515 7.3 High
- cockroach labs cockroach-k8s-request-cert Cockroach Labs cockroach-k8s-request-cert Empty Root Password Authentication Bypass Vulnerability 9.8 Critical
- medtronic mycarelink patient monitor 24950, mycarelink patient monitor 24952 +1 more Medtronic MyCareLink Patient Monitor Empty Password Vulnerability 6.8 Medium
- ibm security access manager, security verify access docker +1 more IBM Security Access Manager Docker information disclosure 6.2 Medium
- yokogawa electric corporation ci server, fast/tools, fast tools +2 more A vulnerability has been found in FAST/TOOLS and CI Server. The affected products have built-in... 5.3 Medium
- furuno systems co.,ltd. acera 9010-08, acera 9010-24, furunosystems acera 9010-08 firmware +1 more +3 more The password is empty in the initial configuration of ACERA 9010-08 firmware v02.04 and earlier,... 8.8 High
- ibm security verify access appliance, security verify access docker, security verify access +2 more IBM Security Access Manager Container unauthorized access 7.3 High
- sap commerce cloud, sap se commerce, sap commerce hycom +2 more SAP Commerce accepts empty passphrases. 8.8 High
- broadcom ca service catalog, ca technologies, a broadcom company service catalog +1 more CA Service Catalog 17.2 and 17.3 contain a vulnerability in the default configuration of the... 7.5 High
- open source alpine linux, f5 big-ip controller, gliderlabs docker-alpine +1 more +3 more Versions of the Official Alpine Linux Docker images (since v3.3) contain a NULL password for the ... 9.8 Critical
- aveva edge, indusoft web studio, intouch machine edition 2014 +1 more +3 more InduSoft Web Studio versions prior to 8.1 SP2, and InTouch Edge HMI (formerly InTouch Machine... 9.8 Critical