CWE-257
Storing Passwords in a Recoverable Format
The storage of passwords in a recoverable format makes them subject to password reuse attacks by malicious users. In fact, it should be noted that recoverable encrypted passwords provide no significant benefit over plaintext passwords since they are subject not only to reuse by malicious attackers but also by maliciou…
Impactr finds and proves whether CWE-257 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.
