CWE-13
ASP.NET Misconfiguration: Password in Configuration File
Storing a plaintext password in a configuration file allows anyone who can read the file access to the password-protected resource making them an easy target for attackers.
Impactr finds and proves whether CWE-13 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.