CWE-256

• CWE ID
• 256

• CWE Name
• Plaintext Storage of a Password

• CWE Abstraction
• Base

• CWE structure
• Simple

• CWE Status
• Incomplete

Storing a password in plaintext may result in a system compromise.

Password management issues occur when a password is stored in plaintext in an application's properties, configuration file, or memory. Storing a plaintext password in a configuration file allows anyone who can read the file access to the password-protecte