Common Weakness Enumeration

    CWE Definition / CWE-798

    CWE-798: Use of Hard-coded Credentials

    The product contains hard-coded credentials, such as a password or cryptographic key.

    Published:15 Jan 2010
    Organization:MITRE
    Modified:11 Dec 2025

    Related Weakness

    CWE-1391: Use of Weak Credentials

    CWE-287: Improper Authentication

    CWE-344: Use of Invariant Value in Dynamically Changing Context

    CWE-671: Lack of Administrator Control over Security

    CWE-257: Storing Passwords in a Recoverable Format