CWE-257: Storing Passwords in a Recoverable Format
Storing Passwords in a Recoverable Format
Weakness ID: 257 (Weakness Base)
Status: Incomplete
Description
Description Summary
The storage of passwords in a recoverable format makes them
subject to password reuse attacks by malicious users. If a system administrator
can recover a password directly, or use a brute force search on the available
information, the administrator can use the password on other
accounts.
Time of Introduction
Architecture and Design
Applicable Platforms
Languages
All
Common Consequences
Scope
Effect
Confidentiality
User's passwords may be revealed.
Authentication
Revealed passwords may be reused elsewhere to impersonate the users in
question.
Likelihood of Exploit
Very High
Demonstrative Examples
Example 1
(Bad Code)
C and C++
int VerifyAdmin(char *password) {
if (strcmp(compress(password), compressed_password)) {
printf("Incorrect Password!\n");
return(0);
}
printf("Entering Diagnostic Mode...\n");
return(1);
}
(Bad Code)
Java
int VerifyAdmin(String password) {
if (passwd.Equals(compress(password), compressed_password))
{
return(0);
}
//Diagnostic Mode
return(1);
}
Potential Mitigations
Phase
Description
Architecture and Design
Use strong, non-reversible encryption to protect stored
passwords.
Other Notes
The use of recoverable passwords significantly increases the chance that
passwords will be used maliciously. In fact, it should be noted that
recoverable encrypted passwords provide no significant benefit over
plain-text passwords since they are subject not only to reuse by malicious
attackers but also by malicious insiders.
Weakness Ordinalities
Ordinality
Description
Primary
(where the
weakness exists independent of other weaknesses)
Description
