The credentials necessary for unlocking a device are shared across multiple parties and may expose sensitive information.
Extended description
Best practices to prevent this CWE
Phase: Integration
Ensure the unlock credentials are shared with the minimum number of parties and with utmost secrecy. To limit the risk associated with compromised credentials, where possible, the credentials should be part-specific.
Phase: Manufacturing
Ensure the unlock credentials are shared with the minimum number of parties and with utmost secrecy. To limit the risk associated with compromised credentials, where possible, the credentials should be part-specific.
Device Unlock Credential Sharing
