Use of Password Hash Instead of Password for Authentication

Properties

id: d3f:CWE-836

name
Use of Password Hash Instead of Password for Authentication
definition
The product records password hashes in a data store, receives a hash of a password from a client, and compares the supplied hash to the hash obtained from the data store.
json

Neighbors

CWE-836 has no direct neighbors in this release.

Inferred Relationships

This page is experimental and may change significantly in future releases.

Related Countermeasure Techniques

No related defensive techniques in this release.

Related Weaknesses

Related Offensive Techniques

No related offensive techniques in this release.