128 – Define unique data source

Summary

All system passwords must be stored in a unique data source.

Description

Storing passwords in a unique data source typically involves centralizing password storage in a dedicated and secure location. This could be a password database or a secure password management system. Centralization helps for the implementation of robust security measures to protect passwords from unauthorized access, additionally, it facilitates management.

Supported In

Advanced: True

References

• CWE-346. Origin validation error
• PADSS-10_2_2. Unique authentication credential must be used for each customer environment

Last updated

2024/01/18