615
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 884 CWE Cross-section 884 2567
MemberOf 962 SFP Secondary Cluster: Unchecked Status Condition 888 2400
MemberOf 1167 SEI CERT C Coding Standard - Guidelines 12. Error
Handling (ERR)
1154 2461
MemberOf 1171 SEI CERT C Coding Standard - Guidelines 50. POSIX
(POS)
1154 2463
MemberOf 1412 Comprehensive Categorization: Poor Coding Practices 1400 2538
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
CLASP Misinterpreted function return value
Software Fault Patterns SFP4 Unchecked Status Condition
CERT C Secure Coding ERR33-
C
Imprecise Detect and handle standard library
errors
CERT C Secure Coding POS54-
C
Imprecise Detect and handle POSIX library errors
References
[REF-62]Mark Dowd, John McDonald and Justin Schuh. "The Art of Software Security
Assessment". 1st Edition. 2006. Addison Wesley.
[REF-18]Secure Software, Inc.. "The CLASP Application Security Process". 2005. < https://
cwe.mitre.org/documents/sources/TheCLASPApplicationSecurityProcess.pdf >.
CWE-256: Plaintext Storage of a Password
Weakness ID : 256
Structure : Simple
Abstraction : Base
Description
Storing a password in plaintext may result in a system compromise.
Extended Description
Password management issues occur when a password is stored in plaintext in an application's
properties, configuration file, or memory. Storing a plaintext password in a configuration file allows
anyone who can read the file access to the password-protected resource. In some contexts, even
storage of a plaintext password in memory is considered a security risk if the password is not
cleared immediately after it is used.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 522 Insufficiently Protected Credentials 1225
CWE Version 4.14
CWE-256: Plaintext Storage of a Password
CWE-256: Plaintext Storage of a Password