DerScanner
Home / Vulnerability Database / Visual Basic 6 : Null password
Visual Basic 6

Visual Basic 6 : Null password

Classification

OWASP Top 10 2013
A2-Broken Authentication and Session ManagementA6-Sensitive Data Exposure
OWASP Top 10 2017
A2-Broken Authentication
OWASP Top 10 2021
A4-Insecure DesignA7-Identification and Authentication Failures
OWASP ASVS
AuthenticationAuthenticationAuthenticationAuthenticationAuthenticationAuthenticationAuthenticationAuthenticationAuthenticationAuthenticationAuthenticationAuthenticationAuthenticationAuthenticationAuthenticationAuthenticationAuthenticationAuthentication
PCI DSS 4.0
6.2.48.3.2
HIPAA
§164.312 (a)(1)
CWE
CWE-257CWE-259CWE-522CWE-862CWE-1028CWE-1032
CWE/SANS Top 25 2011
CWE-862
CWE/SANS Top 25 2021
CWE-522CWE-862

Overview

Password with a value of Nothing can result in an application compromise.

Assigning Nothing to password variables can allow attackers to bypass password verification or might indicate that resources are protected by an empty password.

References

  1. CWE-259: Use of Hard-coded Password
  2. OWASP Top 10 2013-A5-Security Misconfiguration
  3. OWASP Top 10 2013-A6-Sensitive Data Exposure
  4. OWASP Top 10 2017 A2-Broken Authentication
  5. CWE CATEGORY: OWASP Top Ten 2017 Category A2 - Broken Authentication
  6. CWE CATEGORY: OWASP Top Ten 2017 Category A6 - Security Misconfiguration
LOW

DerScanner Severity Score

Do you want to fix Visual Basic 6 : Null password in your application?

See also

Visual Basic 6

Visual Basic 6 : Weak seed of random number generator

Visual Basic 6

Visual Basic 6 : Error bad handling

Visual Basic 6

Visual Basic 6 : Unsafe padding