OWASPASVS 5.0 requirement

ASVS-V13.2.3 If a credential has to be used for service authentication, the credential being used by the consumer is not a default credential (e.g.,…

L2 Published 2025 Official page ↗

Standard: OWASP ASVS 5.0
Chapter: V13 Configuration
Section: V13.2 Backend Communication Configuration
Level: L2 (requirement applies from this verification level up)

Requirement

Verify that if a credential has to be used for service authentication, the credential being used by the consumer is not a default credential (e.g., root/root or admin/admin).