CWE-522Insufficiently Protected Credentials

Description

Common consequences· 1

• Access Control — Gain Privileges or Assume Identity
  An attacker could gain access to user accounts and access sensitive data used by the user accounts.

Potential mitigations· 3

• [Architecture and Design]Use an appropriate security mechanism to protect the credentials.
• [Architecture and Design]Make appropriate use of cryptography to protect the credentials.
• [Implementation]Use industry standards to protect the credentials (e.g. LDAP, keystore, etc.).

Related CAPEC attack patterns· 13

Exploits (incoming)13

Compliance frameworks addressing this (incoming)10

(incoming)50

Showing top 30 of 50 by confidence. Click any target to see the full neighbourhood.

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.