Empty password in configuration file

Software allows usage of an empty password. Such configuration is insecure by default and may lead to various consequences.