3.3 Improper configuration

Improper configuration of certain key pieces of software can make a computer system insecure. For example, not enforcing strong passwords is an improper configuration.