/cwe-258/empty-password-in-configuration-file/