DerScanner
Home / Vulnerability Database / Config files : Visible password
Config files

Config files : Visible password

Classification

OWASP Mobile Top 10 2016
M2-Insecure Data Storage
OWASP Top 10 2017
A3-Sensitive Data Exposure
OWASP Top 10 2021
A2-Cryptographic Failures
OWASP MASVS
V2: 2.7.(L1/L2/L1+R/L2+R)
CWE
CWE-200CWE-359
CWE/SANS Top 25 2021
CWE-200

Overview

There is a leak of confidential information from the application to the user interface.

Entering sensitive information, for example when registering an account or making payments, should be masked with asterisks or dots instead of text.

References

  1. Shoulder surfing
  2. Checking for Sensitive Data Disclosure Through the User Interface
MEDIUM

DerScanner Severity Score

Do you want to fix Config files : Visible password in your application?

See also

Config files

Config files : Text4Shell Vulnerability

Config files

Config files : Incorrect directory deletion

Config files

Config files : Code injection