CWE-255: Credentials Management Errors
Weaknesses in this category are related to the management of credentials.
From the CWE List. © The MITRE Corporation.
Newest
- cisco prime central for hosted collaboration solutionThe portal in Cisco Prime Central for Hosted Collaboration Solution (HCS) places cleartext...4.3 Medium
- baramundi management suiteAn unspecified DLL file in Baramundi Management Suite 7.5 through 8.9 uses a hardcoded encryption...7.8 High
- emerson dl 8000 remote terminal unit, roc 800 remote terminal unit, roc 800l remote terminal unit +1 more +3 moreThe Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with...9.0 High
- emc geosynchrony, vplex geo, vplex local +1 more +3 moreEMC VPLEX before VPLEX GeoSynchrony 5.2 SP1 uses cleartext for storage of the LDAP/AD bind...4.9 Medium
- cisco unified computing systemThe FTP server in Cisco Unified Computing System (UCS) has a hardcoded password for an...4.3 Medium
- open-xchange appsuiteOpen-Xchange AppSuite 7.0.x before 7.0.2-rev15 and 7.2.x before 7.2.2-rev16 has a hardcoded...4.0 Medium
- ibm data studio web console, db2 recovery expert, infosphere optim configuration manager +1 more +3 moreIBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere...3.5 Low
- cisco unified computing systemThe Board Management Controller (BMC) in the Serial over LAN (SoL) subsystem in Cisco Unified...5.8 Medium
- adobe coldfusionThe authentication process in Adobe ColdFusion before 10 does not require knowledge of the...10.0 High
- dahuasecurity dvr0404hd-a, dvr0404hd-l, dvr0404hd-s +62 more +64 moreDahua DVR appliances use a password-hash algorithm with a short hash length, which makes it...7.8 High
- dahuasecurity dvr0404hd-a, dvr0404hd-l, dvr0404hd-s +62 more +64 moreDahua DVR appliances have a hardcoded password for (1) the root account and (2) an unspecified ...10.0 High
- eucalyptus eustoreEucalyptus EuStore sets a blank root password in the default configuration of EMI 3868652036, EMI...6.9 Medium
- ibm rational requirements composerUnspecified vulnerability in IBM Rational Requirements Composer before 4.0.4 makes it easier for...5.4 Medium
- open-xchange appsuiteOpen-Xchange AppSuite before 7.0.2 rev14, 7.2.0 before rev11, 7.2.1 before rev10, and 7.2.2...3.5 Low
- open-xchange serverOpen-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14 uses the...4.3 Medium
- paloaltonetworks pan-osPalo Alto Networks PAN-OS 4.0.x before 4.0.9 and 4.1.x before 4.1.3 stores cleartext LDAP bind...5.0 Medium
- cisco identity services engine softwareThe captive portal application in Cisco Identity Services Engine (ISE) allows remote attackers to...4.3 Medium
- emc rsa authentication agentEMC RSA Authentication Agent for PAM 7.0 before 7.0.2.1 enforces the maximum number of login...5.0 Medium
- samsung smart viewerSamsung Web Viewer for Samsung DVR devices stores credentials in cleartext, which allows context...5.0 Medium
- puppet enterprisePuppet Enterprise before 3.0.1 allows remote attackers to obtain the database password via...5.0 Medium
- puppet enterpriseThe reset password page in Puppet Enterprise before 3.0.1 does not force entry of the current...5.8 Medium
- henri wahl nagstamonThe automatic update request in Nagstamont before 0.9.10 uses a cleartext base64 format for...5.0 Medium
- cisco finesseCisco Finesse allows remote attackers to obtain sensitive information by sniffing the network for...5.0 Medium
- ibm bladecenter, flex system x220 compute node, flex system x240 compute node +27 more +29 moreThe Intelligent Platform Management Interface (IPMI) implementation in Integrated Management...10.0 High
- cisco telepresence system software, telepresence system 1300, telepresence system 1300-65 +8 more +10 moreCisco TelePresence System Software 1.10.1 and earlier on 500, 13X0, 1X00, 30X0, and 3X00 devices,...10.0 High
- siemens scalance w700 series firmware, scalance w744-1, scalance w744-1pro +14 more +16 moreSiemens Scalance W7xx devices with firmware before 4.5.4 use the same hardcoded X.509 certificate...6.6 Medium
- westerndigital my net n750, my net n900, my net n900c +2 moremain_internet.php on the Western Digital My Net N600 and N750 with firmware 1.03.12 and 1.04.16,...4.3 Medium
- verizon wireless network extenderThe Verizon Wireless Network Extender SCS-2U01 has a hardcoded password for the root account,...6.2 Medium
- yahoo tumblrThe Yahoo! Tumblr app before 3.4.1 for iOS sends cleartext credentials, which allows remote...5.0 Medium
- hp san\/iqLeftHand OS (aka SAN iQ) 10.5 and earlier on HP StoreVirtual Storage devices does not provide a...9.4 High
- intel intelligent platform management interface, oracle fujitsu m10 firmware +1 moreThe IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol (RAKP)...7.5 High
- emc rsa authentication manager, rsa authentication manager +1 moreEMC RSA Authentication Manager 8.0 before P2 and 7.1 before SP4 P26, as used in Appliance 3.0,...2.1 Low
- emc replication managerEMC Replication Manager (RM) before 5.4.4 places encoded passwords in application log files,...2.1 Low
- ibm sterling b2b integrator, sterling file gateway +1 moreAn unspecified third-party component in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File...5.0 Medium
- digital alert systems dasdec eas, monroe electronics r189 one-net eas +1 more** DISPUTED ** The administrative web server on the Digital Alert Systems DASDEC EAS device...10.0 High
- hp storeonce d2dThe HP StoreOnce D2D backup system with software before 3.0.0 has a default password of badg3r5...7.7 High
- imperva securesphereThe SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5...5.0 Medium
- imperva securesphereThe SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 does...7.5 High
- fortinet forticlient, forticlient lite, forticlient ssl vpn +2 moreFortiClient before 4.3.5.472 on Windows, before 4.0.3.134 on Mac OS X, and before 4.0 on Android;...5.4 Medium
- canon mx922 printer, mg3100 printer, mg5300 printer +6 more +8 moreEnglish/pages_MacUS/wls_set_content.html on the Canon MG3100, MG5300, MG6100, MP495, MX340, MX870...2.1 Low
- ibm sametime, lotus sametime +1 moreThe Connect client in IBM Sametime 8.5.1, 8.5.1.1, 8.5.1.2, 8.5.2, and 8.5.2.1, as used in the...1.9 Low
- huawei vp 9610, vp 9620 +1 moreThe Huawei viewpoint VP9610 and VP9620 units for the Huawei Video Conference system do not update...8.5 High
- htc droid incredibleThe 3G Mobile Hotspot feature on the HTC Droid Incredible has a default WPA2 PSK passphrase of...7.5 High
- apple iphone osThe WifiPasswordController generateDefaultPassword method in Preferences in Apple iOS 6 and...5.8 Medium
- siemens simatic pcs7, wincc +1 moreThe login implementation in the Web Navigator in Siemens WinCC before 7.2 Update 1, as used in...7.5 High
- rsa authentication managerEMC RSA Authentication Manager 8.0 before P1 allows local users to discover cleartext operating...2.1 Low
- qnap nas, surveillance station pro, viostor network video recorder +2 moreQNAP VioStor NVR devices with firmware 4.0.3, and the Surveillance Station Pro component in QNAP...5.0 Medium
- ibm infosphere optim data growth for oracle e-business suiteThe Console in IBM InfoSphere Optim Data Growth for Oracle E-Business Suite 6.x, 7.x, and 9.x...5.0 Medium
- turck bl20 programmable gateway, bl67 programmable gateway, bl20 programmable gateway firmware +1 more +3 moreTURCK BL20 Programmable Gateway and BL67 Programmable Gateway have hardcoded accounts, which...10.0 High
- bestpractical rtRequest Tracker (RT) 4.x before 4.0.13 does not properly enforce the DeleteTicket and "custom...6.0 Medium
- Show moreLoading…