CWE-256: Plaintext Storage of a Password
The product stores a password in plaintext within resources such as memory or files.
A kind of CWE-522 Insufficiently Protected Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- tpc software matchpoint Credentials are stored in plain text in an SQLite database and in the MatchPoint Android app's SharedPreferences 6.9 Medium
- axxonsoft axxon one Plaintext Storage of LDAP Password in Axxon One Shared Configuration 6.8 Medium
- crypttech crypto and informatics technologies industry and trade inc. vatos dlp Clear Text Storage of Password in Crypttech's Vatos DLP 7.1 High
- servicenow ai platform Cleartext Storage of OAuth Credentials in ServiceNow AI Platform 7.1 High
- No product listed Autotune: kruize/autotune: kruize/autotune: datasources credential disclosure 7.4 High
- dell command | configure (dcc), command\|configure +1 more Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain a Plaintext Storage of... 5.5 Medium
- makeplane plane Plane: Plaintext logging of API token 8.7 High
- ibm guardium data protection IBM Guardium Data Protection is affected by multiple vulnerabilities. 7.5 High
- arista networks eos Security Advisory 0168 5.1 Medium
- contec co., ltd. programmable remote i/o coupler unit (software plc type) cpsn-pcb271-s1-041, remote i/o coupler unit (ethernet/ip adapter) cpsn-eob471ei-[]1, remote i/o coupler unit (server type) cpsn-mcb271-* +2 more Plaintext storage of a password issue exists in CONPROSYS nano Series . If this vulnerability is... 4.1 Medium
- menulux software inc. portal Plaintext Storage of User Credentials in Menulux Software's Menulux Portal 7.1 High
- optimidoc server Cleartext Storage of Sensitive Credentials in OptimiDoc Server (On-Premise) 6.9 Medium
- insyde software insydeh2o HDD Password Stored In Plaintext 8.2 High
- slican ipx Plaintext storage of a password in WebCTI 8.2 High
- iot-ecology rust-iot-platform rust-iot-platform Cleartext Password Storage via User Model 8.7 High
- oracle business intelligence Plaintext password storage in Streamsoft Business Intelligence 7.1 High
- opensolution quick.cart Hard-coded admin credentials in Quick.Cart 6.8 Medium
- weintek cmt3092x firmware, easyweb +1 more Weintek cMT3092X Plaintext Storage of a Password 7.1 High
- pronetiqs panduit intravue Plaintext Storage of a Password in Panduit IntraVUE by Pronetiqs 8.7 High
- red hat ansible automation platform 2 Ansible-lightspeed: ansible lightspeed extension for visual studio code: information disclosure of google gemini api key 3.3 Low
- mwtcmi frogman Frogman: API tokens stored in plaintext 7.4 High
- arcinfo pcvue Insecure password storage in User directory 6.8 Medium
- cloudnative-pg CloudNativePG: Cleartext role passwords recorded in pg_stat_statements allow privileged tenant roles to recover the PostgreSQL superuser credential and achieve RCE in the database pod 8.5 High
- netflix lemur Lemur: Plaintext password storage in Lemur user-update path 4.9 Medium
- jenkins fitnesse, jenkins project fitnesse plugin +1 more Jenkins FitNesse Plugin stores passwords unencrypted 4.3 Medium
- motioneye-project motioneye motionEye: Authentication possible via password hash 9.1 Critical
- steeltoeoss steeltoe.configuration.encryption Steeltoe: OAEP setting silently selects PKCS#1 v1.5 padding 1.9 Low
- dell emc vxrail appliance update_disk_psu_baseline.sh requires password in plain text 7.4 High
- ibm security qradar edr IBM Security QRadar EDR Software has a vulnerability where user credentials may be stored in plain text, potentially exposing sensitive information. 4.1 Medium
- No product listed GNCC GP5 v7.1.76 was discovered to store sensitive wireless network information in plaintext... 4.6 Medium
- heatmiser wifi thermostat Heatmiser Wifi Thermostat 1.7 Credential Disclosure via networkSetup.htm 8.7 High
- ilm informatique openconcerto Plaintext storage of a password vulnerability in ILM Informatique OpenConcerto allows Retrieve... 4.8 Medium
- prometheus, red hat custom metric autoscaler operator for red hat openshift, file integrity operator +52 more +54 more Prometheus Azure AD remote write OAuth client secret exposed via config API 7.5 High
- ibm watsonx.data, watsonx.data intelligence +1 more Vulnerabilities found 6.2 Medium
- langflow-ai langflow langflow-ai langflow Flow Using API core.py has_api_terms credentials storage 5.1 Medium
- sparx systems pty ltd. pro cloud server Plaintext Storage of a Password in Sparx Pro Cloud Server. 9.3 Critical
- synology ssl vpn client A plaintext storage of a password vulnerability in Synology SSL VPN Client before 1.4.5-0684... 8.1 High
- openplc v3 v3, openplcproject openplc v3 firmware +1 more Plaintext storage of a password in OpenPLC_V3 9.2 Critical
- jahlives openssl encrypt openssl_encrypt before 1.4.0 Password Exposure via CLI Argument 8.7 High
- ibm infosphere information server IBM InfoSphere Information Server is vulnerable due to plaintext storage of a password 7.1 High
- linuxfoundation nats-server, red hat multicluster global hub 1.4.5, multicluster global hub 1.6.5 +2 more +4 more NATS has MQTT plaintext password disclosure 8.6 High
- nexxt solutions nebula 300+, nexxtsolutions nebula300plus firmware +1 more Plaintext Storage of Credentials in Configuration Backup in Nexxt Nebula 300+ 6.8 Medium
- citydata citychat CityData CityChat ai.citydata.citychat credentials.json credentials storage 2.0 Low
- albert sağlık hizmetleri ve ticaret health Albert Sağlık Hizmetleri ve Ticaret Albert Health Google Cloud Service Account Key service-account.json credentials storage 2.0 Low
- No product listed La Nacion App app.lanacion.activity BuildConfig.java credentials storage 2.0 Low
- babychakra pregnancy & parenting app BabyChakra Pregnancy & Parenting App app.babychakra.babychakra Configuration.java credentials storage 2.0 Low
- xreal nebula app XREAL Nebula App ai.nreal.nebula.universal CloudStoragePlugin.java credentials storage 2.0 Low
- dell device management agent (ddma), device management agent +1 more Dell Device Management Agent (DDMA), versions prior to 26.02, contain a Plaintext Storage of... 4.4 Medium
- weintek easyweb, cmt-3072xh2 firmware +1 more An issue in the reset_pj.cgi endpoint of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows... 9.8 Critical
- nocodb NocoDB: Plaintext Storage of Shared View Passwords 2.7 Low
- Show olderLoading…