Variant weakness
Draft
CWE-555: J2EE Misconfiguration: Plaintext Password in Configuration File
The J2EE application stores a plaintext password in a configuration file.
2
Recorded CVEs
With this primary weakness
0
KEVs
In the CISA KEV catalog
Not rated
Likelihood of exploit
Per MITRE
Variant
Abstraction
MITRE classification
Overview
Storing a plaintext password in a configuration file allows anyone who can read the file to access the password-protected resource, making it an easy target for attackers.
Real-world CVEs
2 recorded CVEs are caused by CWE-555 (J2EE Misconfiguration: Plaintext Password in Configuration File). The highest-severity and most recent are shown first. 0 new CWE-555 CVEs have been recorded so far in 2026 (1 in 2025).