The Brightpick Mission Control web application contains hardcoded credentials within its client-side JavaScript bundle. This vulnerability allows an attacker to obtain sensitive credentials directly from the application's front-end code. The flaw is classified under CWE-523 and has a high severity rating with a CVSS score of 7.5.