CWE-256: Plaintext Storage of a Password
The product stores a password in plaintext within resources such as memory or files.
A kind of CWE-522 Insufficiently Protected Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- jenkins ns-nd integration performance publisher, jenkins project ns-nd integration performance publisher plugin +1 morePlaintext Storage of a Password in Jenkins NS-ND Integration Performance Publisher Plugin6.5 Medium
- jenkins reverse proxy auth, jenkins project reverse proxy auth plugin +1 moreJenkins Reverse Proxy Auth Plugin vulnerable due to plaintext storage of passwords6.5 Medium
- siemens qms automotiveA vulnerability has been identified in QMS Automotive (All versions). User credentials are stored...7.6 High
- pulpproject pulp ansible, redhat ansible automation platform, satellite +1 more +3 morePlaintext storage of tokens in pulp_ansible5.5 Medium
- jenkins s3 explorer, jenkins project s3 explorer plugin +1 moreAWS secrets displayed without masking by Jenkins S3 Explorer Plugin5.3 Medium
- jenkins katalon, jenkins project katalon plugin +1 moreAPI keys stored in plain text by Jenkins Katalon Plugin6.5 Medium
go.etcd.io/etcd/client/v3Goetcd user credentials are stored in WAL logs in plaintextNo score- fwupdWhen creating an OPERATOR user account on the BMC, the redfish plugin saved the auto-generated...6.5 Medium
- jenkins cons3rt, jenkins project cons3rt plugin +1 moreAPI token stored in plain text by Jenkins CONS3RT Plugin6.5 Medium
- jenkins bigpanda notifier, jenkins project bigpanda notifier plugin +1 moreJenkins BigPanda Notifier Plugin stores BigPanda API key unencrypted4.3 Medium
- jenkins collabnet, jenkins project collabnet plugins plugin +1 moreRabbitMQ password stored in plain text by Jenkins CollabNet Plugins Plugin6.5 Medium
- airspan airvelocity, airvelocity 1500 firmware +1 moreAirspan AirVelocity 1500 web management UI displays SNMP credentials in plaintext on software versions older than 15.18.00.2511, and stores SNMPv3 credentials unhashed on the filesystem, enabling anyo…9.1 Critical
- dell wyse management suiteDell Wyse Management Suite 3.6.1 and below contains an Plain-text Password Storage Vulnerability...6.4 Medium
- jenkins http request, jenkins project http request plugin +1 moreJenkins HTTP Request Plugin stores HTTP Request passwords unencrypted6.5 Medium
- codesys opc da serverPlaintext Storage of a password in CODESYS V3 OPC DA Server5.5 Medium
- hcl software launch, hcltechsw hcl launch +1 moreHCL Launch is vulnerable to information disclosure which can be read by a local user.4.9 Medium
- jenkins hpe network virtualization, jenkins project hpe network virtualization plugin +1 morePasswords stored in plain text by Jenkins hpe-network-virtualization plugin6.5 Medium
- jenkins rqm, jenkins project rqm plugin +1 morePassword stored in plain text by Jenkins RQM Plugin6.5 Medium
- jenkins elasticsearch query, jenkins project elasticsearch query plugin +1 morePlaintext Storage of a Password in Jenkins Elasticsearch Query Plugin6.5 Medium
- jenkins jigomerge, jenkins project jigomerge plugin +1 morePlaintext Storage of a Password in Jenkins Jigomerge Plugin6.5 Medium
- jenkins skype notifier, jenkins project skype notifier plugin +1 morePlaintext Storage of a Password in Jenkins Skype notifier Plugin6.5 Medium
- jenkins opsgenie, jenkins project opsgenie plugin +1 moreJenkins OpsGenie Plugin Plaintext Storage of a Password vulnerability4.3 Medium
- jenkins rocketchat notifier, jenkins project rocketchat notifier plugin +1 morePlaintext Storage of a Password in Jenkins RocketChat Notifier Plugin4.3 Medium
- jenkins build notifications, jenkins project build notifications plugin +1 morePlaintext Storage of a Password in Jenkins Build Notifications Plugin4.3 Medium
- jenkins deployment dashboard, jenkins project deployment dashboard plugin +1 morePlaintext Storage of a Password in Jenkins Deployment Dashboard Plugin4.3 Medium
- jenkins easyqa, jenkins project easyqa plugin +1 moreUser passwords stored in plain text by Jenkins EasyQA Plugin6.5 Medium
- jenkins convertigo mobile platform, jenkins project convertigo mobile platform plugin +1 morePlaintext Storage of a Password in Jenkins Convertigo Mobile Platform Plugin6.5 Medium
- pagerduty rundeckPlaintext Storage of Keys and Passwords in Rundeck and PagerDuty Process Automation7.5 High
- dell unity, unity operating environment, unity xt operating environment +1 more +3 moreDell Unity, Dell UnityVSA, and Dell Unity XT versions prior to 5.2.0.0.5.173 contain a plain-text...6.4 Medium
- dell powerstore, powerstoreos +1 morePowerStore contains Plain-Text Password Storage Vulnerability in PowerStore X & T environments...7.5 High
- automation direct click plc cpu modules: c0-1x cpus, automationdirect c0-10are-d firmware, c0-10dd1e-d firmware +18 more +20 moreAutomation Direct CLICK PLC CPU Modules Plaintext Storage of a Password7.5 High
- jenkins instant-messaging, jenkins project instant-messaging plugin +1 morePlaintext storage in Jenkins instant-messaging Plugin6.5 Medium
- rockwell automation isagraf runtime, rockwellautomation aadvance controller, isagraf free runtime +14 more +16 moreRockwell Automation ISaGRAF5 Runtime Unprotected Storage of Credentials7.8 High
- jenkins incapptic connect uploader, jenkins project incapptic connect uploader plugin +1 morePersonal tokens stored in plain text by Jenkins incapptic connect uploader Plugin4.3 Medium
- dell emc enterprise storage analytics for vrealize operations, enterprise storage analytics +1 moreDell EMC Enterprise Storage Analytics for vRealize Operations, versions 4.0.1 to 6.2.1, contain a...6.0 Medium
- canonical subiquitySubiquity Shows Guided Storage Passphrase in Plaintext with Read-all Permissions8.4 High
- dell emc system update, dellemc system update - dsu +1 moreDell EMC System Update, version 1.9.2 and prior, contain an Unprotected Storage of Credentials...8.2 High
- fresenius-kabi agilia connect, vigilant mastermed, fresenius kabi agilia partner +5 more +7 moreFresenius Kabi Agilia Connect Infusion System plaintext storage of a password6.5 Medium
- dell avamar, emc avamar server, emc powerprotect data protection appliance +2 moreDell EMC Avamar Server version 19.4 contains a plain-text password storage vulnerability in...6.7 Medium
- motorola binatone hubble cameras, binatoneglobal cn28 firmware, cn40 firmware +19 more +21 moreA vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an...6.4 Medium
- dell enterprise sonic osDell Enterprise SONiC OS, versions 3.3.0 and earlier, contains a sensitive information disclosure...7.1 High
- cisco sd-wan vmanage, sd-wan +1 moreCisco SD-WAN vManage Software Disaster Recovery Feature Password Exposure Vulnerability6.5 Medium
- jenkins nomad, jenkins project nomad plugin +1 morePassword stored in plain text by Jenkins Nomad Plugin5.5 Medium
- dell emc repository manager (drm), emc repository manager +1 moreDell EMC Repository Manager (DRM) version 3.2 contains a plain-text password storage...8.8 High
- google android, samsung mobile devices +1 moreA vulnerability that stores IMSI values in an improper path prior to SMR APR-2021 Release 1...4.0 Medium
- cisco firepower management center, secure firewall management center +1 moreCisco Firepower Management Center Information Disclosure Vulnerability5.5 Medium
- cisco iot field network director, iot field network director (iot-fnd) +1 moreCisco IoT Field Network Director Unprotected Storage of Credentials Vulnerability4.1 Medium
- jenkins vmware lab manager slaves, jenkins project vmware lab manager slaves plugin +1 morePassword stored in plain text by Jenkins VMware Lab Manager Slaves Plugin6.5 Medium
- jenkins mail commander, jenkins project mail commander plugin for jenkins-ci plugin +1 morePasswords stored in plain text by Mail Commander Plugin for Jenkins-ci Plugin6.5 Medium
- jenkins appspider, jenkins project appspider plugin +1 morePassword stored in plain text by Jenkins AppSpider Plugin5.5 Medium
- Show moreLoading…