Skip to main content
VARistheemptystringandisbeingusedtosetthepasswordonVAR' is the empty string and is being used to set the password on 'MODEL’. If you meant to set an unusable password, set the password to None or call ‘set_unusable_password()’.
Likelihood: LOW
Confidence: MEDIUM
CWE:
- CWE-521: Weak Password Requirements
OWASP:
- A07:2021 - Identification and Authentication Failures
VARisusingtheemptystringasitsdefaultandisbeingusedtosetthepasswordonVAR' is using the empty string as its default and is being used to set the password on 'MODEL’. If you meant to set an unusable password, set the default value to ‘None’ or call ‘set_unusable_password()’.
Likelihood: MEDIUM
Confidence: MEDIUM
CWE:
- CWE-521: Weak Password Requirements
OWASP:
- A07:2021 - Identification and Authentication Failures
I