CWE-1391
Use of Weak Credentials
The product uses weak credentials (such as a default key or hard-coded password) that can be calculated, derived, reused, or guessed by an attacker.
Impactr finds and proves whether CWE-1391 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.