Home / Vulnerability Database / ABAP : Hardcoded password
ABAP

ABAP : Hardcoded password

Overview

Hardcoded password can lead to the application data being compromised.

Eliminating the security risks related to the password specified in the source code is extremely difficult. These passwords are at least accessible to every developer of the application. Moreover, after the application is installed, removing from the password from its code is possible by updating only. Constant strings are easily extracted from the compiled application by decompilers. Therefore, an attacker does not necessarily need to have an access to the source code to know the parameters of the special account. If these parameters become known to an attacker, system administrators will be forced either to neglect the safety or to restrict the access to the application.

MEDIUM

DerScanner Severity Score

Do you want to fix ABAP : Hardcoded password in your application?

See also

ABAP

ABAP : Insufficient authorization check

ABAP

ABAP : Empty password

ABAP

ABAP : Weak seed of random number generator