CWE-555: J2EE Misconfiguration: Plaintext Password in Configuration File
Filter
The J2EE application stores a plaintext password in a configuration file.
What the weakness is: CWE-555 at MITRE. All weaknesses
Ask an AI about CWE-555
Show the prompt
Explain CWE-555: J2EE Misconfiguration: Plaintext Password in Configuration File and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/555.html and https://cve.bz/cve/cwe/555?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 6.3CVE-2025-46119EPSS 0.4%
An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.27 and 200.18.7.1.323, and in Ruckus ZoneDirector prior to 10.5.1.0.282, where an authenticated request to the management endpoint `/admin/_cmdstat.jsp` discloses …
- 6.5CVE-2023-20059EPSS 0.4%
A vulnerability in the implementation of the Cisco Network Plug-and-Play (PnP) agent of Cisco DNA Center could allow an authenticated, remote attacker to view sensitive information in clear text. The attacker must have valid low-privileged…