Home / Vulnerability Database / Kotlin : Null password
Kotlin
Kotlin : Null password
Classification
OWASP Top 10 2017
OWASP Top 10 2021
OWASP ASVS
HIPAA
CWE/SANS Top 25 2011
Overview
Password with a value of null can result in an application compromise.
Assigning null to password variables can allow attackers to bypass password verification or might indicate that resources are protected by an empty password.
References
- CWE-259: Use of Hard-coded Password
- OWASP Top 10 2017-A2-Broken Authentication
- OWASP Top 10 2013-A5-Security Misconfiguration
- OWASP Top 10 2013-A6-Sensitive Data Exposure
- CWE CATEGORY: OWASP Top Ten 2017 Category A2 - Broken Authentication
- CWE CATEGORY: OWASP Top Ten 2017 Category A6 - Security Misconfiguration
LOW
DerScanner Severity Score
Do you want to fix Kotlin : Null password in your application?
See also
Kotlin
Kotlin : Missing required cryptographic step
Kotlin
Kotlin : Logging into system output
Kotlin