CWE-255: Credentials Management Errors
Weaknesses in this category are related to the management of credentials.
From the CWE List. © The MITRE Corporation.
Newest
- neutrinolabs xrdp, debian linux +1 moreAn issue was discovered in xrdp before 0.9.1. When successfully logging in using RDP into an xrdp...9.8 Critical
- open-xchange ox guardAn issue was discovered in Open-Xchange OX Guard before 2.4.0-rev8. OX Guard uses an...7.5 High
- sap download managerSAP Download Manager 2.1.142 and earlier generates an encryption key from a small key space on...4.7 Medium
- cisco nexus 1000v intercloud firmwareA vulnerability in the Cisco Intercloud Fabric (ICF) Director could allow an unauthenticated,...6.5 Medium
- b2evolutionThe "lost password" functionality in b2evolution before 6.7.9 allows remote attackers to reset...7.5 High
- ibm qradar security information and event managerIBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 uses cleartext storage for...7.8 High
- ibm sterling b2b integratorIBM Sterling B2B Integrator 5.2 before 5020500_14 and 5.2 06 before 5020602_1 allows remote...5.3 Medium
- ibm bigfix remote controlIBM BigFix Remote Control before 9.1.3 uses cleartext storage for unspecified passwords, which...7.3 High
- curlA flaw was found in curl before version 7.51.0 When re-using a connection, curl was doing case...3.7 Low
- sap sapconsoleSAP Console (aka SAPConsole) 7.30 allows local users to discover SAP Server login credentials by...7.8 High
- opendental** DISPUTED ** Open Dental 16.1 and earlier has a hardcoded MySQL root password, which allows...9.8 Critical
- openshift originopenshift-node in OpenShift Origin 1.1.6 and earlier improperly stores router credentials as envvars in the pod when the --credentials option is used, which allows local users to obtain sensitive priv…5.1 Medium
- crestron dm-txrx-100-str firmwareCrestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 have a hardcoded...9.8 Critical
- ibm security identity manager adapterIBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS...7.3 High
- google androidserver/LockSettingsService.java in LockSettingsService in Android 6.x before 2016-07-01 allows...8.4 High
- siemens sicam pas\/pqsSiemens SICAM PAS before 8.07 does not properly restrict password data in the database, which...6.7 Medium
- cisco firesight system softwareCisco Firepower System Software 6.0.0 through 6.1.0 has a hardcoded account, which allows remote...8.6 High
- wordpressWordPress before 4.5.3 allows remote attackers to bypass intended password-change restrictions by...7.5 High
- netgear d3600 firmware, d6000 firmware +1 moreThe password-recovery feature on NETGEAR D3600 devices with firmware 1.0.0.49 and D6000 devices...7.5 High
- ibm websphere mqIBM WebSphere MQ 8.0.0.4 on IBM i platforms allows local users to discover cleartext certificate...4.4 Medium
- abb pcm600ABB PCM600 before 2.7 improperly stores PCM600 authentication credentials, which allows local...3.3 Low
- blackbox alertwerks servsensor contact firmware, alertwerks servsensor firmware, alertwerks servsensor junior firmware +2 moreBlack Box AlertWerks ServSensor with firmware before SP473, AlertWerks ServSensor Junior with...6.5 Medium
- lantronix xprintserver firmwareLantronix xPrintServer devices with firmware before 5.0.1-65 have hardcoded credentials, which...9.8 Critical
- systech syslink sl-1000 modular gateway firmwareThe web interface on SysLINK SL-1000 Machine-to-Machine (M2M) Modular Gateway devices with...9.8 Critical
- suse yast2yast2-users before 3.1.47, as used in SUSE Linux Enterprise 12 SP1, does not properly set empty...9.8 Critical
- symantec messaging gatewayThe management console on Symantec Messaging Gateway (SMG) Appliance devices before 10.6.1 allows...7.8 High
- schneider-electric proface gp-pro ex ex-ed, proface gp-pro ex pfxexedls, proface gp-pro ex pfxexedv +1 more +3 moreThe FTP server in Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS...9.1 Critical
- moxa ioadmin firmware, iologik firmware +1 moreMoxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not...5.3 Medium
- moxa ioadmin firmware, iologik firmware +1 moreMoxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not...5.3 Medium
- cisco firesight system softwareCisco FireSIGHT System Software 6.1.0 does not use a constant-time algorithm for verifying...3.7 Low
- qnap iartist lite, signage station +1 moreThe FTP service in QNAP iArtist Lite before 1.4.54, as distributed with QNAP Signage Station...9.8 Critical
- cisco nx-osCisco NX-OS 7.0(1)N1(1), 7.0(1)N1(3), and 7.0(4)N1(1) on Nexus 2000 Fabric Extender devices has a...9.8 Critical
- tollgrade smartgrid lighthouse sensor management systemTollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS before 5.1, and 4.1.0...8.8 High
- microsoft windows 10, windows 7, windows 8.1 +3 more +5 moreKerberos in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1,...6.2 Medium
- apache cloudstackApache CloudStack before 4.5.2 does not properly preserve VNC passwords when migrating KVM...9.8 Critical
- openelecOpenELEC and RasPlex devices have a hardcoded password for the root account, which makes it...9.8 Critical
- ibm websphere mqThe MQXR service in WMQ Telemetry in IBM WebSphere MQ 7.1 before 7.1.0.7, 7.5 through 7.5.0.5,...4.0 Medium
- zyxel gs1900-10hp firmware, zzinc keymouse firmware +1 moreThe Openfire server in Cisco Finesse Desktop 10.5(1) and 11.0(1) and Unified Contact Center...5.4 Medium
- sauter moduweb visionSauter EY-WS505F0x0 moduWeb Vision before 1.6.0 sends cleartext credentials, which allows remote...9.8 Critical
- phpmyadminphpMyAdmin Cryptographic Vulnerability7.5 High
- lenovo shareitThe Wifi hotspot in Lenovo SHAREit before 3.2.0 for Windows, when configured to receive files,...8.8 High
- harman amx firmwareThe setUpSubtleUserAccount function in /bin/bw on Harman AMX devices before 2016-01-20 has a...9.8 Critical
- harman amx firmwareThe setUpSubtleUserAccount function in /bin/bw on Harman AMX devices before 2015-10-12 has a...9.8 Critical
- cisco modular encoding platform d9036 softwareCisco Modular Encoding Platform D9036 Software before 02.04.70 has hardcoded (1) root and (2)...9.8 Critical
- huawei s5300 firmwareHuawei S5300 Campus Series switches with software before V200R005SPH008 do not mask the password...6.2 Medium
- cisco aironet access point softwareCisco Aironet 1800 devices with software 7.2, 7.3, 7.4, 8.1(112.3), 8.1(112.4), and 8.1(15.14)...7.3 High
- huawei te30, te40, te50 +2 more +4 moreHuawei TE30, TE40, TE50, and TE60 multimedia video conferencing endpoints with software before...6.8 Medium
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +6 more +8 moreBIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, and PEM 12.0.0 before HF1 on the...9.8 Critical
- zyxel gs1900-10hp firmwareThe web management interface on Belkin F9K1102 2 devices with firmware 2.10.17 has a blank...9.8 Critical
- zyxel nbg-418n firmwareThe web administration interface on ZyXEL NBG-418N devices with firmware 1.00(AADZ.3)C0 has a...8.1 High
- Show moreLoading…