CWE-255: Credentials Management Errors
Weaknesses in this category are related to the management of credentials.
From the CWE List. © The MITRE Corporation.
Newest
- redhat enterprise linux, enterprise linux desktop, enterprise linux eus +6 more +8 morerhn-migrate-classic-to-rhsm tool in Red Hat subscription-manager does not verify the Red Hat...4.3 Medium
- juniper junos space, junos space ja1500 appliance, junos space virtual appliance +2 moreJuniper Junos Space before 12.3P2.8, as used on the JA1500 appliance and in other contexts,...4.7 Medium
- gwos groundwork monitorThe Nagios-App component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users...4.0 Medium
- gwos groundwork monitormonarch_scan.cgi in the MONARCH component in GroundWork Monitor Enterprise 6.7.0 allows remote...6.5 Medium
- dentrix g5Henry Schein Dentrix G5 before 15.1.294 has a single internal-database password that is shared...5.0 Medium
- cisco prime network control system, prime network control system software +1 moreThe Cisco Prime Network Control System (NCS) appliance with software before 1.1.1.24 has a...7.5 High
- redhat packstack, red hat openstack folsom for rhel 6, enterprise linux openstack platform 5 (icehouse) +3 more +5 morePackstack: red hat openstack: packstack: unauthorized system modification via insecure answer file creation6.1 Medium
- ibm scale out network attached storageIBM Scale Out Network Attached Storage (SONAS) 1.3 before 1.3.2.3 requires cleartext storage of...3.5 Low
- tigertextThe Contact Customer Support feature in the TigerText Free Private Texting app before 3.1.402 for...5.0 Medium
- schneider-electric magelis xbt hmiThe Schneider Electric Magelis XBT HMI controller has a default password for authentication of...10.0 High
- siemens simatic pcs7, wincc +1 moreSiemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, does not...4.0 Medium
- siemens wincc tia portalSiemens WinCC (TIA Portal) 11 uses a reversible algorithm for storing HMI web-application...4.6 Medium
- redhat enterprise virtualization managerThe domain management tool (rhevm-manage-domains) in Red Hat Enterprise Virtualization Manager ...2.1 Low
- freeradiusmodules/rlm_unix/rlm_unix.c in FreeRADIUS before 2.2.0, when unix mode is enabled for user...6.0 Medium
- 360systems image server 2000, image server maxx, maxx +2 more360 Systems Maxx, Image Server Maxx, and Image Server 2000 have a hardcoded password for the root...10.0 High
- redhat jboss enterprise application platform, jboss enterprise brms platform, jboss enterprise web platform +2 moreThe NonManagedConnectionFactory in JBoss Enterprise Application Platform (EAP) 5.1.2 and 5.2.0,...2.1 Low
- ibm infosphere fasttrack, infosphere information server +1 moreThe client in InfoSphere FastTrack 8.1 through 8.7 in IBM InfoSphere Information Server 8.1, 8.5...1.9 Low
- apache cloudstack, citrix cloudplatform +1 moreApache CloudStack 4.0.0-incubating and Citrix CloudPlatform (formerly Citrix CloudStack) before 3...1.5 Low
- rpmThe rpmpkgRead function in lib/package.c in RPM 4.10.x before 4.10.2 does not return an error...4.3 Medium
- ibm tivoli federated identity managerIBM Tivoli Federated Identity Manager (TFIM) before 6.1.1.14, 6.2.0 before 6.2.0.12, and 6.2.1...3.5 Low
- adobe coldfusionAdobe ColdFusion 9.0, 9.0.1, and 9.0.2, when a password is not configured, allows remote...9.8 Critical
- redhat cloudforms, red hat cloudforms for rhel 6, cloudforms tools for rhel 5 +1 more +3 morePulp: red hat cloudforms: pulp in red hat cloudforms: information disclosure via world-readable configuration file5.5 Medium
- redhat cloudformsPulp in Red Hat CloudForms before 1.1 logs administrative passwords in a world-readable file,...3.3 Low
- carlo gavazzi automation eos-box, carlosgavazzi eos-box photovoltaic monitoring system, eos-box photovoltaic monitoring system firmware +2 moreCarlo Gavazzi EOS Box Hard-Coded Credentials10.0
- gnome display managervicious-extensions/ve-misc.c in GNOME Display Manager (gdm) 2.20.x before 2.20.11, when GDM debug...1.9 Low
- ibm power 5, power 5 system firmware +1 moreThe Service Processor in the IBM Power 5 91##-### and 940#-### before SF240_418_382 does not...7.9 High
- jboss ironjacamarUser confusion in IronJacamar4.3 Medium
- owncloud, owncloud server +1 moreThe "Lost Password" reset functionality in ownCloud before 4.0.9 and 4.5.0 does not properly...5.0 Medium
- openstack essex, folsom, red hat openstack essex for rhel 6 +5 more +7 moreOpenstack keystone: openstack keystone: authorization bypass via improper ec2 token handling5.4 Medium
- openstack folsomOpenStack Keystone Insufficient token expiration4.0 Medium
- ibm rational developer for system zThe Host Connect emulator in IBM Rational Developer for System z 7.1 through 8.5.1 does not...2.1 Low
- emc avamarEMC Avamar Client for VMware 6.1 stores the cleartext server root password on the proxy client,...3.3 Low
- novell zenworks asset managementThe rtrlet web application in the Web Console in Novell ZENworks Asset Management (ZAM) 7.5 uses...7.8 High
- emc networker module for microsoft applicationsThe (1) install and (2) upgrade processes in EMC NetWorker Module for Microsoft Applications (NMM...2.1 Low
- vwar virtual warVirtual War (aka VWar) 1.6.1 R2 uses static session cookies that depend only on a user's password...6.8 Medium
- akiva webboardAkiva WebBoard 8.x stores passwords in plaintext, which allows local users to obtain sensitive...1.9 Low
- ibm websphere application serverIBM WebSphere Application Server (WAS) 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0...6.8 Medium
- apple mac os xMobile Accounts in Apple Mac OS X before 10.7.5 and 10.8.x before 10.8.2 saves password hashes...4.3 Medium
- wago i\/o system 758 industrial pc deviceThe Linux Console on the WAGO I/O System 758 model 758-870, 758-874, 758-875, and 758-876...10.0 High
- wago i\/o system 758 industrial pc deviceWAGO I/O System 758 model 758-870, 758-874, 758-875, and 758-876 Industrial PC (IPC) devices have...10.0 High
- mozilla bugzillaAuth/Verify/LDAP.pm in Bugzilla 2.x and 3.x before 3.6.11, 3.7.x and 4.0.x before 4.0.8, 4.1.x...5.0 Medium
- garrettcom magnum managed networks software-6k, magnum managed networks software-6k secure +1 moreThe Management Software application in GarrettCom Magnum MNS-6K before 4.4.0, and 14.x before 14...7.7 High
- silverstripeThe Add Member dialog in the Security admin page in SilverStripe 2.4.0 saves user passwords in...1.9 Low
- silverstripeThe Security/changepassword URL action in SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4...6.8 Medium
- mcafee enterprise mobility manager, enterprise mobility manager agent +1 moreMcAfee Enterprise Mobility Manager (EMM) Agent before 4.8 and Server before 10.1 record all...4.3 Medium
- korenix jetportThe Linux firmware image on (1) Korenix Jetport 5600 series serial-device servers and (2) ORing...10.0 High
- att status, htc chacha, desire +6 more +8 moreThe Samsung and HTC onTouchEvent method implementation for Android on the T-Mobile myTouch 3G...7.1 High
- hp san\/iqhydra.exe in HP SAN/iQ before 9.5 on the HP Virtual SAN Appliance has a hardcoded password of...4.0 Medium
- ubercartThe Ubercart module 6.x-2.x before 6.x-2.8 and 7.x-3.x before 7.x-3.1 for Drupal stores passwords...2.1 Low
- redhat jboss community application server, jboss enterprise application platform +1 moretwiddle.sh in JBoss AS 5.0 and EAP 5.0 and earlier accepts credentials as command-line arguments,...2.1 Low
- Show moreLoading…