Home / Vulnerability Database / VBScript : Hardcoded password
VBScript

VBScript : Hardcoded password

Overview

Password is hardcoded. This may lead to an application data compromise.

Eliminating security risks related to hardcoded passwords is extremely difficult. These passwords are at least accessible to every developer of the application. Moreover, after the application is installed, removing password from its code is possible only via an update. Constant strings are easily extracted from the compiled application by decompilers. Therefore, an attacker does not necessarily need to have an access to the source code to know the parameters of the special account. If these parameters become known to an attacker, system administrators will be forced either to neglect the safety, or to restrict the access to the application.

MEDIUM

DerScanner Severity Score

Do you want to fix VBScript : Hardcoded password in your application?

See also

VBScript

VBScript : Null encryption key

VBScript

VBScript : Empty encryption key

VBScript

VBScript : Unsafe padding