Common Weakness Enumeration

    CWE Definition / CWE-258

    CWE-258: Empty Password in Configuration File

    Using an empty string as a password is insecure.

    Published:19 Jul 2006
    Organization:MITRE
    Modified:28 Oct 2026

    Related Weakness

    CWE-260: Password in Configuration File

    CWE-521: Weak Password Requirements