CWE-547: Use of Hard-coded, Security-relevant Constants
The product uses hard-coded constants instead of symbolic names for security-critical values, which increases the likelihood of mistakes during code maintenance or security policy change.
A kind of CWE-1078 Inappropriate Source Code Style or Formatting.
From the CWE List. © The MITRE Corporation.
Newest
- jumis pro sia jumis Universal sysadmin credential vulnerability in Jumis 9.3 Critical
- red hat enterprise linux 10, enterprise linux 9 +1 more Keylime: keylime: security bypass due to hardcoded tpm quote nonce 6.3 Medium
- trane tracer concierge, tracer sc, tracer sc+ +2 more +4 more Use of Hard-coded Credentials vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge 6.9 Medium
- microsens nmp web+ Use of Hard-coded, Security-relevant Constants in MICROSENS NMP Web+ 9.3 Critical
- nvidia app NVIDIA NvContainer service for Windows contains a vulnerability in its usage of OpenSSL, where an... 2.5 Low
- donknap dpanel Dpanel's hard-coded JWT secret leads to remote code execution 9.8 Critical
- optigo networks visual networks capture tool, visual bacnet capture tool +1 more Use of Hard-Coded, Security-Relevant Constants 8.7 High
- optigo networks visual networks capture tool, visual bacnet capture tool +1 more Use of Hard-Coded, Security-Relevant Constants in Optigo Networks Visual BACnet Capture Tool / Optigo Visual Networks Capture Tool 8.7 High
- hanwha vision co., ltd. xrn-420s Hardcoding sensitive information 5.6 Medium
- siemens mendix encryption A vulnerability has been identified in Mendix Encryption (All versions >= V10.0.0 < V10.0.2).... 8.7 High
- git, debian linux, fedoraproject fedora +2 more Local Git clone may hardlink arbitrary user-readable files into the new repository's "objects/" directory 3.9 Low
- deepset haystack, deepset-ai deepset-ai/haystack +1 more Use of Hard-coded, Security-relevant Constants in deepset-ai/haystack 9.1 Critical
- keycloak, redhat single sign-on +1 more keycloak vulnerable to unauthorized login via mail server setup 9.1 Critical
- hackerone html-janitor node module, theguardian html-janitor +1 more Bypassing Sanitization using DOM clobbering in html-janitor 6.1 Medium