CWE-259
Use of Hard-coded Password
The product contains a hard-coded password, which it uses for its own inbound authentication or for outbound communication to external components.
Impactr finds and proves whether CWE-259 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.