CWE-255: Credentials Management Errors
Weaknesses in this category are related to the management of credentials.
From the CWE List. © The MITRE Corporation.
Newest
- zhistaredu startraining zhistaredu StarTraining JWT Token application.yml UserLoginService.createToken hard-coded password 6.9 Medium
- tenda ch, cp, tx3 +2 more Tenda CH/CP/TX3 SSH hard-coded password 9.2 Critical
- sourcecodester onlne examination & learning management system, syllabus-aligned learning management and examination system +1 more SourceCodester Onlne Examination & Learning Management System import_users.php hard-coded password 6.9 Medium
- sourcecodester barangay resident profiling and information management system SourceCodester Barangay Resident Profiling and Information Management System Password Reset passsword_reset.php hard-coded password 6.9 Medium
- langflow-ai langflow langflow-ai langflow Flow Using API core.py has_api_terms credentials storage 5.1 Medium
- citydata citychat CityData CityChat ai.citydata.citychat credentials.json credentials storage 2.0 Low
- albert sağlık hizmetleri ve ticaret health Albert Sağlık Hizmetleri ve Ticaret Albert Health Google Cloud Service Account Key service-account.json credentials storage 2.0 Low
- No product listed La Nacion App app.lanacion.activity BuildConfig.java credentials storage 2.0 Low
- babychakra pregnancy & parenting app BabyChakra Pregnancy & Parenting App app.babychakra.babychakra Configuration.java credentials storage 2.0 Low
- xreal nebula app XREAL Nebula App ai.nreal.nebula.universal CloudStoragePlugin.java credentials storage 2.0 Low
- talelin lin-cms TaleLin Lin-CMS Tests Folder config.py password in configuration file 6.3 Medium
- zkteco biotime ZKTeco BioTime Endpoint safe_setting credentials storage 6.9 Medium
- sgai space1 nas n1211ds SGAI Space1 NAS N1211DS gsaiagent JSONAPI GET_USER_INFO credentials storage 5.3 Medium
- intelbras unniti Intelbras UnniTI usuarios.xml credentials storage 6.9 Medium
- intelbras icip, icip 30 firmware +1 more Intelbras ICIP acessodeusuario.xml credentials storage 6.9 Medium
- tenda rp3 pro Tenda RP3 Pro Firmware Update force_upgrade.sh hard-coded password 8.4 High
- tomofun furbo 360, furbo mini, furbo 360 dog camera firmware +1 more +3 more Tomofun Furbo 360/Furbo Mini Root Account hard-coded password 7.3 High
- zytec dalian zhuoyun technology central authentication service Zytec Dalian Zhuoyun Technology Central Authentication Service HTTP Header git hard-coded password 6.9 Medium
- cudy lt500e, lt500e firmware +1 more Cudy LT500E Web shadow hard-coded password 2.0 Low
- teledyne flir fb-series o, flir fh-series id +1 more Teledyne FLIR FB-Series O/FLIR FH-Series ID hard-coded password 6.3 Medium
- saltbo zpan saltbo zpan JSON Web Token token.go NewToken hard-coded password 6.3 Medium
- done-0 jank Done-0 Jank JWT Token jwt_utils.go hard-coded password 6.3 Medium
- mao888 bluebell-plus mao888 bluebell-plus JWT Token jwt.go hard-coded password 6.3 Medium
- d-link dcs-7517, dlink dcs-7517 firmware +1 more D-Link DCS-7517 Qlync Password Generation httpd g_F_n_GenPassForQlync hard-coded password 6.3 Medium
- totolink t10, t10 firmware +1 more TOTOLINK T10 shadow.sample hard-coded password 2.0 Low
- intelbras incontrol, incontrol web +1 more Intelbras InControl Dispositivos Edição Page credentials storage 5.1 Medium
- audi universal traffic recorder app Audi Universal Traffic Recorder App FTP Credentials hard-coded password 2.1 Low
- blackvue app BlackVue App API Endpoint credentials storage 4.8 Medium
- huawei harmonyos Some Huawei wearables have a permission management vulnerability. 7.7 High
- free-now freenow, intelligent apps freenow app +1 more Intelligent Apps Freenow App Keystore SSL.java hard-coded password 6.3 Medium
- arista eos, terminattr +1 more TerminAttr streams MACsec sensitive data in clear text to other authorized users in CVP 6.1 Medium
- arista eos, terminattr +1 more TerminAttr streams IPsec sensitive data in clear text to other authorized users in CVP 6.8 Medium
- google fscrypt Local Denial of Service in fscrypt PAM module 5.5 Medium
- parallels remote application server, remote application server (client) +1 more Parallels Remote Application Server credentials management errors 7.1 High
- dart software development kit, google llc dart sdk +1 more Dart - Publishing to third-party package repositories may expose pub.dev credentials 8.8 High
- dell cpg bios, latitude 5285 2-in-1 firmware, latitude 5289 2-in-1 firmware +26 more +28 more Dell BIOS contains a Credentials Management issue. A local authenticated malicious user may... 8.2 High
- arista metamako operating system In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line,... 6.3 Medium
- arista metamako operating system In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line,... 8.7 High
- cisco connected mobile experiences Cisco Connected Mobile Experiences Strong Authentication Requirements Enforcement Bypass 4.3 Medium
- dell emc integrated system for microsoft azure stack hub, emc integrated system for microsoft azure stack hub firmware +1 more Dell EMC Integrated System for Microsoft Azure Stack Hub, versions 1906 – 2011, contain an... 8.0 High
- abb ability™ symphony® plus historian, ability™ symphony® plus operations, symphony \+ historian +1 more +3 more Improper Credential Storage in Symphony Plus 7.0 High
- cisco prime license manager Cisco Prime License Manager Privilege Escalation Vulnerability 9.8 Critical
- abb irb140, irb140 firmware, irc5 firmware +2 more RVD#3326: Hardcoded default credentials on IRC 5 OPC Server 9.1 Critical
- paloaltonetworks pan-os, vm-series, palo alto networks vm-series plugin +2 more VM-Series on Microsoft Azure: Inadvertent collection of credentials in Tech support files on HA configured VMs 5.8 Medium
- cisco ios xe sd-wan software, ios xe +1 more Cisco IOS XE SD-WAN Software Default Credentials Vulnerability 8.4 High
- sonicwall email security appliance Weak default password cause vulnerability in SonicWall Email Security appliance which leads to... 9.8 Critical
- schneider electric se apc ups network management card 2 aos, schneider-electric ap9630 firmware, ap9631 firmware +2 more +4 more A Credentials Management CWE-255 vulnerability exists in the APC UPS Network Management Card 2... 9.8 Critical
- cpanel cPanel before 60.0.15 does not ensure that system accounts lack a valid password, so that logins... 5.3 Medium
- cpanel cPanel before 62.0.4 has a fixed password for the Munin MySQL test account (SEC-196). 8.8 High
- cpanel In cPanel before 55.9999.141, Scripts/addpop reveals a command-line password in a process list ... 6.5 Medium
- Show olderLoading…