CWE-256: Plaintext Storage of a Password
The product stores a password in plaintext within resources such as memory or files.
A kind of CWE-522 Insufficiently Protected Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- juniper junos, juniper networks junos os +1 moreJunos OS: NFX350: Password hashes stored in world-readable format6.3 Medium
- cisco duo network gateway (dng), duo network gateway +1 moreDuo Network Gateway (DNG) Information Disclosure Vulnerability7.1 High
- hackerone nextcloud server, nextcloud server +1 moreA logic error in Nextcloud Server 19.0.0 caused a plaintext storage of the share password when it...7.5 High
- jenkins soapui pro functional testing, jenkins project soapui pro functional testing plugin +1 morePasswords stored in plain text by Jenkins ReadyAPI Functional Testing Plugin6.5 Medium
- jenkins team foundation server, jenkins project team foundation server plugin +1 moreCredentials stored in plain text by Jenkins tfs Plugin3.3 Low
- jenkins parameterized remote trigger, jenkins project parameterized remote trigger plugin +1 moreSecret stored in plain text by Jenkins Parameterized Remote Trigger Plugin4.3 Medium
- grundfos cim 500Grundfos CIM 500 v06.16.00 stores plaintext credentials, which may allow sensitive information to...7.5 High
parsenpmStoring Password in Local StorageNo score- dell emc omimssc for sccm, emc omimssc for scvmm, omimssc (openmanage integration for microsoft system center) +2 moreDell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM versions...8.8 High
- jenkins project hp alm quality center plugin, hp application lifecycle management quality center project application lifecycle management quality center +1 morePassword stored in plain text by Jenkins HP ALM Quality Center Plugin3.3 Low
- jenkins white source, jenkins project white source plugin +1 moreCredentials stored in plain text by Jenkins White Source Plugin4.3 Medium
- jenkins github coverage reporter, jenkins project github coverage reporter plugin +1 moreSecret stored in plain text by Jenkins GitHub Coverage Reporter Plugin4.3 Medium
- jenkins testcomplete support, jenkins project testcomplete support plugin +1 morePassword stored in plain text by Jenkins TestComplete support Plugin4.3 Medium
- jenkins slack upload, jenkins project slack upload plugin +1 moreSecret stored in plain text by Jenkins Slack Upload Plugin4.3 Medium
- busch-jaeger 6186/11 telefon-gateway, abb tg/s 3.2 telephone gateway, tg\/s3.2 firmware +1 more +3 moreABB/Busch-Jaeger Telephone Gateway TG/S 3.2 Plaintext storing of credentials6.2 Medium
- jenkins copr, jenkins project copr plugin +1 moreCredentials stored in plain text by Jenkins Copr Plugin4.3 Medium
- jenkins zephyr for jira test management, jenkins project zephyr for jira test management plugin +1 moreJenkins Zephyr for JIRA Test Management Plugin stores credentials in plain text5.5 Medium
- jenkins zephyr enterprise test management, jenkins project zephyr enterprise test management plugin +1 moreCredentials stored in plain text by Zephyr Enterprise Test Management Plugin5.5 Medium
- jenkins applatix, jenkins project applatix plugin +1 morePassword stored in plain text by Applatix Plugin6.5 Medium
- jenkins parasoft environment manager, jenkins project parasoft environment manager plugin +1 morePassword stored in plain text by Parasoft Environment Manager Plugin6.5 Medium
- jenkins harvest scm, jenkins project harvest scm plugin +1 morePasswords stored in plain text by Harvest SCM Plugin6.5 Medium
- jenkins harvest scm, jenkins project harvest scm plugin +1 morePasswords stored in plain text by Harvest SCM Plugin6.5 Medium
- jenkins eagle tester, jenkins project eagle tester plugin +1 morePlaintext Storage of a Password in Jenkins Eagle Tester Plugin6.5 Medium
- jenkins ecx copy data management, jenkins project ecx copy data management plugin +1 morePassword stored in plain text by ECX Copy Data Management Plugin4.3 Medium
- jenkins bmc release package and deployment, jenkins project bmc release package and deployment plugin +1 moreCredential stored in plain text by BMC Release Package and Deployment Plugin4.3 Medium
- jenkins digitalocean, jenkins project digitalocean plugin +1 moreToken stored in plain text by DigitalOcean Plugin4.3 Medium
- jenkins debian package builder, jenkins project debian package builder plugin +1 moreCredentials stored in plain text by debian-package-builder Plugin4.3 Medium
- jenkins dynamic extended choice parameter, jenkins project dynamic extended choice parameter plugin +1 morePassword stored in plain text by Dynamic Extended Choice Parameter Plugin4.3 Medium
- jenkins azure ad, jenkins project azure ad plugin +1 moreClient secret transmitted in plain text by Azure AD Plugin5.3 Medium
- jenkins fortify, jenkins project fortify plugin +1 moreFortify Plugin stored credentials in plain text4.3 Medium
- gehealthcare apexpro telemetry server firmware, carescape central station mai700 firmware, carescape central station mas700 firmware +3 more +5 moreIn ApexPro Telemetry Server, Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior,...10.0 Critical
- jenkins weibo, jenkins project weibo plugin +1 moreJenkins Weibo Plugin stores credentials unencrypted in its global configuration file5.5 Medium
- jenkins spira importer, jenkins project spira importer plugin +1 morePlaintext Storage in Jenkins Spira Importer Plugin5.5 Medium
- juniper sbr carrierSBR Carrier: A vulnerability in the identity and access management certificate generation procedure allows a local attacker to gain access to confidential information.5.6 Medium
- jenkins ldap email, jenkins project ldap email plugin +1 moreJenkins LDAP Email Plugin shows plain text password in configuration form7.5 High
- jenkins dingding, jenkins project dingding[钉钉] plugin +1 moreDingTalk Plugin stores credentials in plain text3.3 Low
- jenkins gem publisher, jenkins project gem publisher plugin +1 moreJenkins Gem Publisher Plugin stores credentials as plaintext5.5 Medium
- jenkins configuration as code, jenkins project configuration as code plugin +1 morePlaintext Storage of a Password in Jenkins Configuration as Code Plugin5.5 Medium
- eficode influxdb, jenkins project influxdb plugin +1 morePlaintext password storage in Jenkins InfluxDB Plugin8.8 High
- siemens logo! 8 bm (incl. siplus variants), logo\!8 bm firmware +1 moreA vulnerability has been identified in LOGO!8 BM (All versions). Unencrypted storage of passwords...7.5 High
- jenkins jira-ext, jenkins project jira-ext plugin +1 moreJenkins jira-ext Plugin stores credentials unencrypted8.8 High
- juniper service insight, service now +1 moreJunos Space Service Now and Service Insight: Organization username and password stored in plaintext in log files.6.5 Medium
- 3m detcon sitewatch gateway, detcon sitewatch gateway +1 moreDetcon Sitewatch Gateway, all versions without cellular, an attacker can edit settings on the...7.5 High
- ics-cert moxa iks, eds, moxa eds-405a firmware, eds-408a firmware +2 more +4 moreMoxa IKS and EDS store plaintext passwords, which may allow sensitive information to be read by...7.5 High
- ice qube thermal management center, iceqube thermal management center firmware +1 moreIn Ice Qube Thermal Management Center versions prior to version 4.13, passwords are stored in...9.8 Critical
- echelon i.lon 100, i.lon 600, smartserver 1 +5 more +7 moreEchelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON...9.8 Critical
- beaconmedaes scroll medical air systems firmware, ics-cert beaconmedaes totalalert scroll medical air systems web application +1 moreIn the web application in BeaconMedaes TotalAlert Scroll Medical Air Systems running software...9.8 Critical
- omron cx-supervisor, ics-cert beaconmedæs totalalert scroll medical air systems web application +1 moreIn Omron CX-Supervisor Versions 3.30 and prior, access of uninitialized pointer vulnerabilities...5.3 Medium
- sma sunny boy tlst-21, sunny tripower tl-10, sunny boy 1.5 firmware +40 more +42 more** DISPUTED ** An issue was discovered in SMA Solar Technology products. Sniffed passwords from...9.8 Critical
- moxa oncell 5004-hspa firmware, oncell 5104-hsdpa firmware, oncell 5104-hspa firmware +3 more +5 moreA Plaintext Storage of a Password issue was discovered in Moxa OnCell G3110-HSPA Version 1.3...9.8 Critical