CWE-255: Credentials Management Errors
Weaknesses in this category are related to the management of credentials.
From the CWE List. © The MITRE Corporation.
Newest
- openstack python-keystoneclientpython-keystoneclient vulnerable to context confusion in Keystone auth_token middleware6.0 Medium
- zyxel n300 netusb nbg-419n, n300 netusb nbg-419n firmware +1 moreThe ZyXEL Wireless N300 NetUSB NBG-419N router with firmware 1.00(BFQ.6)C0 has a hardcoded...7.8 High
- websense triton unified security center, triton web filter, triton web security +2 more +4 moreThe Settings module in Websense Triton Unified Security Center 7.7.3 before Hotfix 31, Web Filter...3.5 Low
- ibm spss analytic serverIBM SPSS Analytic Server 1.0 before IF002 and 1.0.1 before IF004 logs cleartext passwords, which...4.0 Medium
- sap business object processing framework for abapSAP Business Object Processing Framework (BOPF) for ABAP has hardcoded credentials, which makes...7.5 High
- sap print and output managementSAP Print and Output Management has hardcoded credentials, which makes it easier for remote...7.5 High
- posh project poshThe remember me feature in portal/scr_authentif.php in POSH (aka Posh portal or Portaneo) 3.0, 3...5.0 Medium
- redhat conga, enterprise linux +1 moreLuci in Red Hat Conga stores the user's username and password in a Base64 encoded string in the...3.7 Low
- symantec liveupdate administratorThe forgotten-password feature in forcepasswd.do in the management GUI in Symantec LiveUpdate...7.5 High
- cisco cloud portalIntelligent Automation for Cloud (IAC) in Cisco Cloud Portal 9.4.1 and earlier includes a...5.0 Medium
- citrix netscaler application delivery controller firmwareCitrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77...5.0 Medium
- ibm sametimeThe Connect client in IBM Sametime 8.5.1, 8.5.1.1, 8.5.1.2, 8.5.2, 8.5.2.1, 9.0, and 9.0.0.1,...1.9 Low
- cisco cvr100w, rv110w, rv215w +3 more +5 moreThe web management interface on the Cisco RV110W firewall with firmware 1.2.0.9 and earlier,...10.0 High
- synology diskstation managerThe OpenVPN module in Synology DiskStation Manager (DSM) 4.3-3810 update 1 has a hardcoded root...7.8 High
- imapsync project imapsyncimapsync before 1.584, when running with the --tls option, attempts a cleartext login when a...4.3 Medium
- ibm rational focal pointThe account-creation functionality in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and...5.0 Medium
- cisco ucs directorCisco UCS Director (formerly Cloupia) before 4.0.0.3 has a hardcoded password for the root...9.3 High
- openstack image registry and delivery service \(glance\)OpenStack Glance sensitive information disclosure via logs2.6 Low
- blackberry enterprise service, universal device service, enterprise server +1 more +3 moreBlackBerry Enterprise Service 10 before 10.2.1, Universal Device Service 6, Enterprise Server...5.0 Medium
- ibm platform symphonyAn unspecified servlet in IBM Platform Symphony Developer Edition (DE) 5.2 and 6.1.x through 6.1...10.0 High
- matthew booth virt-v2v, redhat enterprise linux +1 morevirt-v2v before 0.8.4 does not preserve the VNC console password when converting a guest, which...4.4 Medium
- rockwell automation rslogix 5000 software, rockwellautomation rslogix 5000 design and configuration software +1 moreRockwell RSLogix 5000 Insufficiently Protected Credentials6.3
- zte zxv10 w300The TELNET service on the ZTE ZXV10 W300 router 2.1.0 has a hardcoded password ending with...9.3 High
- gatehouse, harris bgan, hughes network systems 9201 +6 more +8 moreThe firmware on GateHouse; Harris BGAN RF-7800B-VU204 and BGAN RF-7800B-DU204; Hughes Network...10.0 High
- starbucksThe Starbucks 2.6.1 application for iOS stores sensitive information in plaintext in the...2.1 Low
- franklinfueling ts-550 evo, ts-550 evo firmware +1 moreFranklin Fueling Systems TS-550 evo with firmware 2.0.0.6833 and other versions before 2.4.0 has...10.0 High
- thecus n8800 nas server, n8800 nas server firmware +1 moreThe Thecus NAS server N8800 with firmware 5.03.01 uses cleartext credentials for administrative...7.8 High
- thecus n8800 nas server, n8800 nas server firmware +1 moreThe ADS/NT Support page on the Thecus NAS server N8800 with firmware 5.03.01 allows remote...7.8 High
- cisco telepresence video communication serverThe Expressway component in Cisco TelePresence Video Communication Server (VCS) uses the same...6.4 Medium
- e107fpw.php in e107 through 1.0.4 does not check the user_ban field, which makes it easier for remote...4.3 Medium
- moodlelib/adminlib.php in Moodle through 2.3.11, 2.4.x before 2.4.8, 2.5.x before 2.5.4, and 2.6.x...4.0 Medium
- cisco webex meetings serverThe web portal in the Enterprise License Manager component in Cisco WebEx Meetings Server allows...4.0 Medium
- sierrawireless raven x, raven x ev-do, airlink mp at\&t +16 more +18 moreThe Sierra Wireless AirLink Raven X EV-DO gateway 4221_4.0.11.003 and 4228_4.0.11.003 allows...9.3 High
- conceptronic c54apm, c54apm firmware +1 moreThe Conceptronic C54APM access point with runtime code 1.26 has a default password of admin for...7.8 High
- cru-inc ditto forensic fieldstation, ditto forensic fieldstation firmware +1 moreThe write-blocker in CRU Ditto Forensic FieldStation with firmware before 2013Oct15a has a...10.0 High
- hot hotbox router, hotbox router firmware +1 moreThe HOT HOTBOX router with software 2.1.11 has a default WPS PIN of 12345670, which makes it...3.3 Low
- dlink dsr-1000, dsr-1000n, dsr-150 +12 more +14 moreD-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and...7.8 High
- gnupgGnuPG 1.x before 1.4.16 generates RSA keys using sequences of introductions with certain patterns...2.1 Low
- samba, canonical ubuntu linux +1 moreSamba 3.x before 3.6.23, 4.0.x before 4.0.16, and 4.1.x before 4.1.6 does not enforce the...5.0 Medium
- checkpoint endpoint securityUnlock.exe in Media Encryption EPM Explorer in Check Point Endpoint Security through E80.50 does...3.3 Low
- checkpoint endpoint securityMedia Encryption EPM Explorer in Check Point Endpoint Security through E80.50 does not properly...3.3 Low
- ibus project ibus, opensuse +1 moreThe default configuration of IBUS 1.5.4, and possibly 1.5.2 and earlier, when IBus.InputPurpose...1.9 Low
- apple iphone osThe App Store component in Apple iOS before 7.0.4 does not properly enforce an intended...4.7 Medium
- osirix-viewer osirix, osirix md +1 moreThe DICOM listener in OsiriX before 5.8 and before 2.5-MD, when starting up, encrypts the TLS...1.9 Low
- ibm security appscanIBM Security AppScan Enterprise 8.5 through 8.7.0.1, when Jazz authentication is enabled, allows...4.0 Medium
- cisco telepresence vx clinical assistantThe WIL-A module in Cisco TelePresence VX Clinical Assistant 1.2 before 1.21 changes the admin...10.0 High
- ibm security appscanThe Jazz Team Server component in IBM Security AppScan Enterprise 8.x before 8.8 has a default...5.5 Medium
- emc atmosEMC Atmos before 2.1.4 has a blank password for the PostgreSQL account, which allows remote...5.0 Medium
- cisco video surveillance 4000 ip camera, video surveillance 4300e ip camera, video surveillance 4500e ip camera +2 moreThe analytics page on Cisco Video Surveillance 4000 IP cameras has hardcoded credentials, which...6.4 Medium
- tp-link tl-sc3130, tl-sc3130g, tl-sc3171 +2 more +4 moreTP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before...10.0 High
- Show moreLoading…