CWE-259: Use of Hard-coded Password
The product contains a hard-coded password, which it uses for its own inbound authentication or for outbound authentication to external components.
A kind of CWE-798 Use of Hard-coded Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- langgenius dify langgenius dify Sandbox Run __init__.py hard-coded credentials 5.3 Medium
- apache software foundation ofbiz Apache OFBiz: Hard-coded Credentials in AdminServer Enable Unauthenticated Denial of Service No score
- qihoo 360 whole home router m5 Qihoo 360 Whole Home Router M5 Boot Script mpt start hard-coded credentials 10.0 Critical
- d-link dhp-w610av D-Link DHP-W610AV HNAP Login defaultvalue.xml login_prepare_hnap empty password 9.3 Critical
- d-link e15, m32, r15 +1 more +3 more D-Link E15/M32/R15/R32 MQTT Broker passwd hard-coded credentials 5.3 Medium
- cemtan sar2html cemtan sar2html sar2html.py hard-coded credentials 6.9 Medium
- meetecho janus-gateway meetecho janus-gateway Admin API admin.js hard-coded credentials 5.3 Medium
- funnywolf viper FunnyWolf Viper config hard-coded credentials 6.9 Medium
- sciphi-ai r2r SciPhi-AI R2R JWT Secret hard-coded credentials 6.9 Medium
- topoteretes cognee topoteretes cognee JWT Signing Key get_api_auth_backend.py get_user_id_by_email hard-coded credentials 5.3 Medium
- dell live optics collector Dell Live Optics Collector, versions prior to 27.2.13.310, contain(s) a Use of Hard-coded... 5.6 Medium
- refly-ai refly refly-ai refly JWT Token app.config.ts hard-coded credentials 6.9 Medium
- zhistaredu startraining zhistaredu StarTraining JWT Token application.yml UserLoginService.createToken hard-coded password 6.9 Medium
- sfturing hosp order sfturing hosp_order jdbc.properties hard-coded credentials 6.3 Medium
- nvidia infrastructure controller, infra controller +1 more NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause... 5.0 Medium
- aiyiyi121 sxdevops aiyiyi121 SxDevOps Settings settings.py hard-coded credentials 6.9 Medium
- aiyiyi121 sxdevops aiyiyi121 SxDevOps services.py ensure_default_superuser hard-coded credentials 6.9 Medium
- dromara orion-visor dromara orion-visor ExposeApiAspect.java ExposeApiAspect.beforeExposeApi hard-coded credentials 6.9 Medium
- No product listed Authentication Bypass via Hardcoded Master Verification Code vulnerability in Siam Ordering (siam... 8.1 High
- itsourcecode student management system ningzichun Student Management System Database Connection database.php mysqli_connect hard-coded credentials 6.9 Medium
- sourcecodester syllabus-aligned learning management & examination system SourceCodester Syllabus-Aligned Learning Management & Examination System db.php hard-coded credentials 6.9 Medium
- tenda cp3 Tenda CP3 hostapd hard-coded credentials 5.1 Medium
- xing inc. cptrans-me-x XING CPTrans-ME-X contains a Use of Hard-coded Password (CWE-259). Anyone with the knowledge of... 9.3 Critical
- inbox foundry activeinbox extension Inbox Foundry ActiveInbox Extension Google OAuth Client Secret service-worker.production-esm.js hard-coded credentials 6.9 Medium
- vas3k taxhacker vas3k TaxHacker JWT Secret config.ts envSchema.parse hard-coded credentials 6.9 Medium
- zabbix Hardcoded session key in Zabbix 7.4 7.7 High
- lb-link x-pro LB-LINK X-PRO easycwmp hard-coded credentials 9.2 Critical
- lb-link x-pro LB-LINK X-PRO shadow hard-coded credentials 9.2 Critical
- tenda ch, cp, tx3 +2 more Tenda CH/CP/TX3 SSH hard-coded password 9.2 Critical
- cisco secure firewall management center (fmc), secure firewall management center +1 more Cisco Secure Firewall Management Center Software Static Credential Vulnerability 5.3 Medium
- sourcecodester onlne examination & learning management system, syllabus-aligned learning management and examination system +1 more SourceCodester Onlne Examination & Learning Management System import_users.php hard-coded password 6.9 Medium
- sourcecodester barangay resident profiling and information management system SourceCodester Barangay Resident Profiling and Information Management System Password Reset passsword_reset.php hard-coded password 6.9 Medium
- No product listed T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03, and T7281 v1.0.03 were discovered to... 9.8 Critical
- netapp active iq onecollect Active IQ OneCollect version 2.7.3 contains hard-coded credentials that could allow an... 5.3 Medium
- netapp active iq config advisor Active IQ Config Advisor version 6.7.3 contains hard-coded credentials that could allow an... 5.3 Medium
- eppendorf bioflo 320 Eppendorf BioFlo 320 Use of hard-coded password 9.3 Critical
- picotronica e-clinic healthcare system echs PicoTronica e-Clinic Healthcare System ECHS echs.js hard-coded credentials 6.9 Medium
- astrbotdevs astrbot AstrBotDevs AstrBot Dashboard auth.py hard-coded credentials 6.9 Medium
- liangliangyy djangoblog liangliangyy DjangoBlog Setting settings.py hard-coded credentials 6.3 Medium
- liangliangyy djangoblog liangliangyy DjangoBlog Setting settings.py hard-coded credentials 6.3 Medium
- osuuu lightpicture osuuu LightPicture API Upload Endpoint lp.sql hard-coded credentials 6.9 Medium
- siklu etherhaul 8010, ceragon etherhaul-8010fx firmware +1 more Siklu EtherHaul 8010 siklu-uimage-nxp-enc-10_6_2-18707-ea552dc00b devices have a static root... 6.4 Medium
- yokogawa electric corporation centum vp Hardcoded Password Vulnerability have been found in CENTUM. Affected products contain a hardcoded... 2.1 Low
- wandb openui wandb OpenUI config.py hard-coded credentials 4.8 Medium
- yi technology home camera Yi Technology YI Home Camera ipc hard-coded credentials 8.7 High
- index conferences & exhibitions organization ywf bpof apgcs app INDEX Conferences & Exhibitions Organization YWF BPOF APGCS App ae.index.apgcs BuildConfig.java hard-coded credentials 4.8 Medium
- i-sens smartlog app i-SENS SmartLog App air.SmartLog.android hard-coded credentials 4.8 Medium
- qnap hyper data protector Hyper Data Protector 6.6 Medium
- No product listed An issue pertaining to CWE-259: Use of Hard-coded Password was discovered in oslabs-beta... 9.8 Critical
- tenda g1 firmware Tenda G1V3.1si V16.01.7.8 Firmware V16.01.7.8 was discovered to contain a hardcoded password... 8.4 High
- Show olderLoading…