General Information

Weak Default Password Generation

Variants:
Direct 

Vector Type:
Vulnerability

Relevance:
Generic

Layer:
Application-Level

Platforms:
Any

Target Type:
Application

Affected Mechanisms:
Authentication Verification

Invented In:
01/01/1999

Added In:
23/12/2014


Vector Operation Method:
An account creation or initialization feature creates weak initial random passwords or assignes consistent default passwords.


Direct Variant:

Weak Initial Password Generation

Also Known As:
Weak Default Password Generation

Typical Severity:
Medium

Resources:

White Papers:

Learn More: