CVE-1999-0506

A Windows NT domain user or administrator account has a default, null, blank, or missing password...

PlaintextPasswordEncoder authenticates encoded passwords that are null

Spring Security, versions 4.2.x up to 4.2.12, and older unsupported versions support plain text passwords using PlaintextPasswordEncoder. If an application using an affected version of Spring Security is leveraging PlaintextPasswordEncoder and a user has a null encoded password, a malicious user ...

Дырка в Solaris (pam_ldap authorization)

Можно ввести NULL - пароль вместо правильного...

CVE-1999-0502

A Unix account has a default, null, blank, or missing password...