The software fails to mask passwords during entry, increasing
the potential for attackers to observe and capture
passwords.
Time of Introduction
Implementation
Potential Mitigations
Phase
Description
Recommendations include requiring all password fields in your web
application be masked to prevent other users from seeing this
information.
Other Notes
Basic web application security measures include masking all passwords
entered by a user when logging in to a web application. Normally, each
character in a password entered by a user is instead represented with an
asterisk.
Description
