CWE-256: Plaintext Storage of a Password
The product stores a password in plaintext within resources such as memory or files.
A kind of CWE-522 Insufficiently Protected Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- intelbras incontrol, incontrol web +1 moreIntelbras InControl Dispositivos Edição Page credentials storage5.1 Medium
- bec technologies multiple routers, bectechnologies router firmware +1 moreBEC Technologies Multiple Routers Cleartext Password Storage Information Disclosure Vulnerability4.9 Medium
- macro-video v380e6 c1 firmwareAn issue in Macro-video Technologies Co.,Ltd V380E6_C1 IP camera (Hw_HsAKPIQp_WF_XHR) 1020302...2.6 Low
- canonical mysql-k8s-operatorMySQL K8s charm could leak credentials for root-level user `serverconfig`5.0 Medium
- jenkins cadence vmanager, jenkins project cadence vmanager plugin +1 moreJenkins Cadence vManager Plugin Stores Verisium Manager vAPI keys Unencrypted4.3 Medium
- ibm infosphere information serverIBM InfoSphere Information Server information disclosure5.3 Medium
- superagi, transformeroptimus transformeroptimus/superagi +1 moreInsufficiently Protected Credentials in transformeroptimus/superagi6.5 Medium
- blackvue appBlackVue App API Endpoint credentials storage4.8 Medium
- ibm qradar edr, security qradar edr +1 moreIBM QRadar EDR information disclosure4.1 Medium
- printerlogic vasion print, virtual appliance +1 moreVasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923...9.8 Critical
- printerlogic vasion print, virtual appliance +1 moreVasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.862 Application 20.0.2014...9.8 Critical
- No product listedBosscomm IF740 Firmware versions:11001.7078 & v11001.0000 and System versions: 6.25 & 6.00 were...6.2 Medium
- No product listedDraytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860...7.5 High
- abb system 800xaCamera passwords stored in clear text7.0 High
- ibm common licensingIBM Common Licensing information disclosure6.2 Medium
- iocharger firmware for ac modelsPlaintext default credentials in firmware8.3 High
- dell vxrail hci, vxrail d560 firmware, vxrail d560f firmware +40 more +42 moreDell VxRail, versions 8.0.000 through 8.0.311, contain(s) a Plaintext Storage of a Password...7.5 High
- dell vxrail hci, vxrail d560 firmware, vxrail d560f firmware +40 more +42 moreDell VxRail, versions 7.0.000 through 7.0.532, contain(s) a Plaintext Storage of a Password...7.5 High
- ibm storage defender - resiliency service, storage defender resiliency service +1 moreIBM Storage Defender - Resiliency Service information disclosure5.7 Medium
- ibm storage defender - resiliency service, storage defender resiliency service +1 moreIBM Storage Defender - Resiliency Service information disclosure4.4 Medium
- dell vxrail hci, vxrail hyperconverged infrastructure +1 moreDell VxVerify, versions prior to x.40.405, contain a Plain-text Password Storage Vulnerability in...7.2 High
- billion electric m100, m120n, m150 +1 more +3 moreBillion Electric router - Plaintext Storage of a Password7.2 High
- zabbixMedia Types: Office365, SMTP passwords are unencrypted and visible in plaintext when exported2.7 Low
- sharp corporation multiple mfps (multifunction printers)User passwords are decrypted and stored on memory before any user logged in. Those decrypted...5.9 Medium
- hcl software workload schedulerIBM Workload Scheduler information disclosure5.5 Medium
- pimcoreChange-Password via Portal-Profile sets PimcoreBackendUser password without hashing8.7 High
- techno support company smart-tab android appSmart-tab Android app installed April 2023 or earlier contains an issue with plaintext storage of...2.4 Low
- ibm cognos command centerIBM Cognos Command Center information disclosure4.3 Medium
- convoypanel panelPlaintext Storage of a Password in Eliz Software's Panel9.8 Critical
- govicture pc420 firmwareVicture PC420 1.1.39 was discovered to contain a hardcoded root password which is stored in...8.8 High
- cisco ios xr software, ios xr +1 moreCisco Routed Passive Optical Network Cleartext Password Vulnerability8.4 High
- sap se netweaver as for java (destination service)Information disclosure vulnerability in SAP NetWeaver AS for Java (Destination Service)6.0 Medium
- hathway skyworth cm5100-511 firmware, skyworthdigital cm5100 firmware +1 moreAn issue in Hathway Skyworth Router CM5100 v.4.1.1.24 allows a physically proximate attacker to...4.6 Medium
- nixos calamares-nixos-extensionscalamares-nixos-extensions LUKS keyfile exposure regression on legacy BIOS systems7.8 High
- ibm cloud pak for security, qradar suite software, qradar suite +2 moreIBM QRadar Suite Software information disclosure5.5 Medium
- siemens logo! 12/24rce, logo! 12/24rceo, logo! 230rce +13 more +15 moreA vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions), LOGO!...5.1 Medium
- zabbixFront-end audit log shows passwords in plaintext8.1 High
- hamastar meetinghub paperless meetingsHamastar MeetingHub Paperless Meetings - Plaintext Storage of a Password9.3 Critical
- dell data manager appliance software (dmas), dm5500 firmware +1 moreDM5500 5.16.0.0, contains an information disclosure vulnerability. A local attacker with high...3.3 Low
- plug&track sensor net connect v2, proges sensor net connect, sensor net connect firmware v2 +2 moreA “CWE-256: Plaintext Storage of a Password” affecting the administrative account allows an...4.2 Medium
- solar-log 1000 firmwareAn issue in Solar-Log 1000 before v2.8.2 and build 52-23.04.2013 was discovered to store...8.1 High
- open mainframe project zoweZowe CLI Auto-Init Leaks Credentials Locally5.9 Medium
- ibm datacap, datacap navigator +1 moreIBM Datacap Navigator information disclosure5.5 Medium
- bas-ip aa-07bd, aa-07bdi, av-01bd +26 more +28 moreBAS-IP AV-01D, AV-01MD, AV-01MFD, AV-01ED, AV-01KD, AV-01BD, AV-01KBD, AV-02D, AV-02IDE, AV-02IDR...6.5 Medium
- suse rancherRancher's RKE1 Encryption Config kept in plain-text within cluster AppliedSpec7.1 High
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +48 more +50 moreInsecure permissions7.4 High
- lb-link bl-w1210m, bl-w1210m firmware +1 moreLB-LINK BL-W1210M v2.0 was discovered to store user credentials in plaintext within the router's...9.8 Critical
- ibm jazz reporting serviceIBM Jazz Reporting Service information disclosure4.4 Medium
- debezium community project debezium-uiAn issue in Debezium Community debezium-ui v.2.5 allows a local attacker to execute arbitrary...7.1 High
typo3/cms-corePackagistTYPO3 Information Disclosure in User Authentication5.3 Medium- Show moreLoading…