Common Weakness Enumeration

    CWE Definition / CWE-640

    CWE-640: Weak Password Recovery Mechanism for Forgotten Password

    The product contains a mechanism for users to recover or change their passwords without knowing the original password, but the mechanism is weak.

    Published:30 Jan 2008
    Organization:MITRE
    Modified:30 Apr 2026

    Related Weakness

    CWE-1390: Weak Authentication

    CWE-287: Improper Authentication