CWE-327 Use of a Broken or Risky Cryptographic Algorithm
CWE-732 Incorrect Permission Assignment for Critical Resource
CWE-759 Use of a One-Way Hash without a Salt
CWE-798 Use of Hard-coded Credentials