CWE-836
Overview
- CWE ID
- 836
- CWE Name
- Use of Password Hash Instead of Password for Authentication
- CWE Abstraction
- Base
- CWE structure
- Simple
- CWE Status
- Incomplete
Description
The software records password hashes in a data store, receives a hash of a password from a client, and compares the supplied hash to the hash obtained from the data store.