The product uses weak credentials (such as a default key or hard-coded password) that can be calculated, derived, reused, or guessed by an attacker.
When the user changes or sets a password, check the password against a database of already compromised or breached passwords. These passwords are likely to be used in password guessing attacks.
Our security experts can help you identify and remediate CWE-1391 vulnerabilities in your codebase.
Get Security Assessment