CWE-521 - Weak Password Requirements

Description

The task of authentication mechanism consists in control and requirement to make the passwords more complete. Under the influence of the weakness mechanism doesn't demand strong passwords that makes the field of guessing combination smaller. It allows attackers to learn password and access user's accounts or obtain potentially sensitive information.
The weakness is introduced during Architecture and Design, Implementation stages.

Latest vulnerabilities for CWE-521

Multiple vulnerabilities in goTenna ATAK Plugin 2024-10-01
Low Yes

Multiple vulnerabilities in goTenna Pro App 2024-09-30
Medium Yes

Weak password requirements in IBM Common Licensing 2024-09-18
Medium Yes

Multiple vulnerabilities in Juniper Secure Analytics (JSA) 2024-09-10
High Yes

Multiple vulnerabilities in Siemens Location Intelligence 2024-08-14
Medium Yes

Multiple vulnerabilities in IBM Security Verify Access Docker 2024-08-05
Medium Yes

Multiple vulnerabilities in Philips Vue PACS 2024-07-22
High Yes

Multiple vulnerabilities in Bosch Remote Programing Software 2024-03-13
Medium Yes

Multiple vulnerabilities in IBM Engineering Requirements Management DOORS/DWA 2024-03-04
Critical Yes

Multiple vulnerabilities in IBM QRadar Suite software 2024-03-03
Medium Yes

References

Description of CWE-521 on Mitre website