CWE-261

Weak Encoding for Password

High

Description

Obscuring a password with a trivial encoding does not protect the password.

Potential Impact

Access Control: Gain Privileges or Assume Identity

How to Fix

General

Passwords should be encrypted with keys that are at least 128 bits in length for adequate security.

Detection Methods

Automated Static Analysis: Automated static analysis, commonly referred to as Static Application Security Testing (SAST), can find some instances of this weakness by analyzing source code (or binary/compiled code) without havin...

Related Weaknesses

References

View on MITRE CWE Database →

Need Help Fixing This Vulnerability?

Our security experts can help you identify and remediate CWE-261 vulnerabilities in your codebase.

Get Security Assessment