Skip to content

0500-mysql-weak-psw-MySQL Weak Password¶

Rule ID¶

0500-mysql-weak-psw

Category¶

db

Severity¶

warn

Compatible Versions¶

Linux

Description¶

MySQL is the best relational database management system and one of the most popular relational database management systems. It is the best RDBMS application software for web applications. Because the password of the MySQL root account is set too simply, it is easily cracked, allowing attackers to easily obtain the password and gain high privileges.

Scan Frequency¶

1 1 1 * *

Rationale¶

The password of the MySQL root account is too simple, lacks sufficient complexity, and is easily cracked. If not detected and handled in time, it can lead to data leakage and other issues.

Risk Items¶

Data leakage
Data extortion

Audit Method¶

Run the following command to verify:
```
mysql -u root -p
```

Remediation¶

Run the following command to change the password:

mysql -u root
mysql> SET PASSWORD FOR "root"@"localhost" = PASSWORD("newpass");

Impact¶

None.

Default Value¶

None

References¶

CIS Controls¶

None