Summary

All system passwords must be stored in a unique data source.

Description

Storing passwords in a unique data source typically involves centralizing password storage in a dedicated and secure location. This could be a password database or a secure password management system.
Centralization helps for the implementation of robust security measures to protect passwords from unauthorized access, additionally, it facilitates management.

Supported In

This requirement is verified in following services

References

• CWE™-346. Origin validation error
• PA-DSS-10_2_2. Unique authentication credential must be used for each customer environment

Vulnerabilities

Free trial

Search for vulnerabilities in your apps for free with Fluid Attacks' automated security testing! Start your 21-day free trial and discover the benefits of the Continuous Hacking Essential plan. If you prefer the Advanced plan, which includes the expertise of Fluid Attacks' hacking team, fill out this contact form.