CWE-256: Plaintext Storage of a Password
The product stores a password in plaintext within resources such as memory or files.
A kind of CWE-522 Insufficiently Protected Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- westermo edw-100Westermo EDW-100 devices through 2024-05-03 allow an unauthenticated user to download a...9.8 Critical
- digisol dg-gr1321 firmware, router dg-gr1321 +1 morePassword Storage in Plaintext Vulnerability in Digisol Router5.4 Medium
- cemi tomasz pawełek cemiparkStoring credentials in plaintext in CemiPark5.4 Medium
- dell update manager plugin, openmanage enterprise update manager +1 moreDell Update Manager Plugin, versions 1.4.0 through 1.5.0, contains a Plain-text Password Storage...3.5 Low
- dell openmanage enterpriseDell OpenManage Enterprise, versions 4.0.0 and 4.0.1, contains a sensitive information disclosure...6.3 Medium
- asus rt-n12\+ b1Asus RT-N12+ B1 router stores credentials in cleartext, which could allow local attackers to...6.1 Medium
- red hat mirror registry for red hat openshiftMirror-registry: redis password stored in plain-text7.3 High
- red hat mirror registry for red hat openshiftMirror-registry: database user and password stored in plain-text7.3 High
- red hat mirror registry for red hat openshift, redhat mirror registry +1 moreMirror-registry: default database secret key stored in plain-text on initial configuration file6.5 Medium
- red hat mirror registry for red hat openshift, redhat mirror registry +1 moreMirror-registry: plain-text default csrf secret key8.8 High
- buffalo a2533dhp2, wsr-2533dhp2 firmware, wsr-2533dhp firmware +6 more +8 morePlaintext storage of a password issue exists in BUFFALO wireless LAN routers, which may allow a...9.8 Critical
- ibm cloud pak for security, qradar suite software, qradar suite +2 moreIBM QRadar Suite Software information disclosure6.3 Medium
- automationdirect c-more ea9 hmi ea0-t7cl-r, c-more ea9 hmi ea9-pgmsw, c-more ea9 hmi ea9-rhmi +8 more +10 moreAutomationDirect C-MORE EA9 HMI Plaintext Storage of a Password6.5 Medium
- microsoft visual studio codeVisual Studio Code Elevation of Privilege Vulnerability8.8 High
- inpsyde backwpup, wp media backwpup – wordpress backup & restore plugin +1 moreBackWPup <= 4.0.2 - Plaintext Storage of Backup Destination Password2.2 Low
- eventstore, kurrent eventstoredb +1 moreEventStoreDB Projections Subsystem has potential password leak5.5 Medium
- ibm storage defender - resiliency service, storage defender resiliency service +1 moreIBM Storage Defender - Resiliency Service information disclosure4.4 Medium
- mia technology mia-medPassword Disclosure in Mia Technology's Mia-Med7.5 High
- ibm security access manager container, security verify access appliance, security verify access docker +2 moreIBM Security Access Manager Container information disclosure5.1 Medium
- rapid software llc scada, rapidscada rapid scada +1 morePlaintext Storage of a Password in Rapid SCADA6.2 Medium
- dell networker, networker module for databases and applications - oracle +1 moreNetworker 19.9 and all prior versions contains a Plain-text Password stored in temporary config...7.8 High
- dell powerprotect data manager dm5500 appliance, powerprotect data manager dm5500 firmware +1 moreDell DM5500 5.14.0.0, contain a Plain-text Password Storage Vulnerability in PPOE. A local...5.5 Medium
- nautobot nautobot-plugin-device-onboardingClear Text Credentials Exposed via Onboarding Task5.7 Medium
- busbaer eisbaer scada, eisbaer scada v3.0.6433.1964 +1 moreEisBaer Scada - CWE-256: Plaintext Storage of a Password7.1 High
- eaton easysoftInsecure storage of password in easySoft5.9 Medium
- netapp snapgathersInformation Disclosure Vulnerability in SnapGathers6.5 Medium
- ormazabal ekorccp, ekorccp firmware, ekorrci +1 more +3 moreUnprotected Storage of Credentials in Ormazabal products7.3 High
- socomec modulys gp (mod3gp-sy-120k), modulys gp firmware +1 moreSocomec MOD3GP-SY-120K Plaintext Storage of a Password7.5 High
- red hat openstack platform 16.2, redhat openstack platform +1 morePlain-text passwords saved in /var/log/messages4.4 Medium
- didi knowsearchdidi KnowSearch 1 credentials storage4.3 Medium
- skyhigh security secure web gateway (swg), skyhighsecurity secure web gateway +1 moreA password management vulnerability in Skyhigh Secure Web Gateway (SWG) in main releases 11.x...6.2 Medium
- redhat keycloak, red hat single sign-on 7 +1 morePlaintext storage of user password8.8 High
- softneta meddream pacsSoftneta MedDream PACS Plaintext Storage of a Password6.1 Medium
- infodrom e-invoice approval systemPlaintext Storage of a Password in Infodrom Sofwares E-Invoice Approval System7.5 High
- piigab m-bus softwarepack, m-bus 900s firmware +1 morePiiGAB M-Bus Plaintext Storage of a Password6.5 Medium
- ovarro tbox lt2, tbox ms-cpu32, tbox rm2 +7 more +9 more?All versions of the TWinSoft Configuration Tool store encrypted passwords as plaintext in...6.5 Medium
- fortinet fortisiemA plaintext storage of a password vulnerability [CWE-256] in FortiSIEM 6.7 all versions, 6.6 all...3.6 Low
- dataprobe iboot-pdu4-c20 firmware, iboot-pdu4-n20 firmware, iboot-pdu4a-c10 firmware +20 more +22 moreCVE-2022-49456.5 Medium
- jenkins code dx, code dx plugin +1 moreAPI keys stored and displayed in plain text by Code Dx Plugin4.3 Medium
- jenkins code dx, code dx plugin +1 moreAPI keys stored and displayed in plain text by Code Dx Plugin4.3 Medium
- secomea gatemanagerClear-text passwords in configuration files6.1 Medium
- mitsubishi electric corporation melsec iq-f series fx5-enet, melsec iq-f series fx5-enet/ip, melsec iq-f series fx5s-30mr/es +146 more +148 moreInformation Disclosure Vulnerability in MELSEC Series7.5 High
- snap one wattbox wb-300-ip-3, snapav wattbox wb-300-ip-3 firmware +1 moreSnap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior store passwords in a plaintext file...5.7 Medium
- suse rancherRancher: Exposure of sensitive fields9.9 Critical
- jenkins testquality updater, jenkins project testquality updater plugin +1 morePlaintext Storage of a Password in Jenkins TestQuality Updater Plugin5.5 Medium
- jenkins view-cloner, jenkins project view-cloner plugin +1 morePasswords stored in plain text by Jenkins view-cloner Plugin6.5 Medium
- jenkins github pull request coverage status, jenkins project github pull request coverage status plugin +1 morePlaintext storage of Access Token in Jenkins GitHub Pull Request Coverage Status Plugin5.5 Medium
- jenkins jira pipeline steps, jenkins project jira pipeline steps plugin +1 morePlaintext Storage of a Password in Jenkins JIRA Pipeline Steps Plugin5.5 Medium
- ibm security verify governance, identity manager, security verify governance +1 moreIBM Security Verify Governance, Identity Manager information disclosure6.3 Medium
- ibm maximo mobile, maximo application suite +1 moreIBM Maximo information disclosure6.2 Medium
- Show moreLoading…