Common Weakness Enumeration

    CWE Definition / CWE-258

    CWE-258: Empty Password in Configuration File

    Using an empty string as a password is insecure.

    Published:19 Jul 2006
    Organization:MITRE
    Modified:11 Dec 2025

    Related Weakness

    CWE-260: Password in Configuration File

    CWE-521: Weak Password Requirements