{
  "slug": "security-misconfiguration-default-credentials",
  "url": "https://library.infinity8labs.com/security-misconfiguration-default-credentials/",
  "title": "Security misconfiguration and default credentials",
  "short": "Security misconfiguration",
  "aliases": [
    "Insecure defaults",
    "Default credentials",
    "Improper security configuration",
    "Factory credentials"
  ],
  "summary": "Security misconfiguration leaves systems exposed through unsafe defaults, unnecessary features, excessive permissions, or shared credentials. A single overlooked setting can bypass otherwise sound application controls.",
  "cwe": [
    "CWE-16",
    "CWE-1392"
  ],
  "owasp": "A05:2021 Security Misconfiguration",
  "typical_severity": {
    "min": "low",
    "max": "critical"
  },
  "updated": "2026-10-15",
  "references": [
    {
      "title": "CWE-16: Configuration",
      "url": "https://cwe.mitre.org/data/definitions/16.html"
    },
    {
      "title": "CWE-1392: Use of Default Credentials",
      "url": "https://cwe.mitre.org/data/definitions/1392.html"
    },
    {
      "title": "OWASP Top 10 A05:2021 Security Misconfiguration",
      "url": "https://owasp.org/Top10/A05_2021-Security_Misconfiguration/"
    },
    {
      "title": "OWASP Application Security Verification Standard",
      "url": "https://owasp.org/www-project-application-security-verification-standard/"
    }
  ],
  "sections": [
    "https://library.infinity8labs.com/security-misconfiguration-default-credentials/#overview",
    "https://library.infinity8labs.com/security-misconfiguration-default-credentials/#impact",
    "https://library.infinity8labs.com/security-misconfiguration-default-credentials/#examples",
    "https://library.infinity8labs.com/security-misconfiguration-default-credentials/#remediation",
    "https://library.infinity8labs.com/security-misconfiguration-default-credentials/#testing",
    "https://library.infinity8labs.com/security-misconfiguration-default-credentials/#references"
  ]
}