Skip to content
ImpactrStart an engagement

CWE-555

J2EE Misconfiguration: Plaintext Password in Configuration File

The J2EE application stores a plaintext password in a configuration file.

Official CWE-555 definition at MITRE

Impactr finds and proves whether CWE-555 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.

Start an engagement
← CWE database