CWE-521: Weak Password Requirements
The product does not require that users should have strong passwords.
A kind of CWE-1391 Use of Weak Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- philips intellispace pacs, isite pacs +1 morePhilips iSite and IntelliSpace PACS, iSite PACS, all versions, and IntelliSpace PACS, all...8.8 High
- foscam c2 application firmware, c2 system firmware, opticam i5 application firmware +1 more +3 moreAn issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application...9.8 Critical
- dell encryption, endpoint security suite enterprise +1 moreDell Encryption and Dell Endpoint Security Suite Enterprise Security Policy Overwrite Vulnerability7.5 High
- gleeztech gleez cmsA vulnerability in the Gleez CMS 1.2.0 login page could allow an unauthenticated, remote attacker...5.3 Medium
- ietf internet key exchange, strongswan +1 moreCVE-2018-53895.9 Medium
- npci bharat interface for money \(bhim\)The National Payments Corporation of India BHIM application 1.3 for Android relies on a four...7.5 High
- dell 2335dn engine firmware, 2335dn network firmware, 2335dn printer firmware +2 moreOn Dell 2335dn printers with Printer Firmware Version 2.70.05.02, Engine Firmware Version 1.10.65...8.8 High
- lantronix mss firmwareBaseon Lantronix MSS devices do not require a password for TELNET access.9.8 Critical
- red hat ansible tower, redhat cloudforms +1 moreAnsible Tower before version 3.2.4 has a flaw in the management of system and organization...7.2 High
- ibm security guardium database activity monitorIBM Security Guardium 10.0, 10.0.1, and 10.1 through 10.1.4 Database Activity Monitor does not...9.8 Critical
- pingidentity ldapsdkWeak Password Requirements in UnboundID LDAP SDK9.8 Critical
- foxconn ap-fc4064-t firmwareA privileged account with a weak default password on the Foxconn femtocell FEMTO AP-FC4064-T...7.2 High
- ibm security guardium big data intelligenceIBM Security Guardium Big Data Intelligence (SonarG) 3.1 does not require that users should have...9.8 Critical
- cisco prime collaboration provisioningA vulnerability in the web portal of the Cisco Prime Collaboration Provisioning Tool could allow...7.5 High
- moxa nport w2150a firmware, nport w2250a firmware +1 moreA Credentials Management issue was discovered in Moxa NPort W2150A versions prior to 1.11, and...9.1 Critical
- acti camera firmware, acti corporation d, b, i, and e series cameras +1 moreACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC use...9.8 Critical
- fortinet fortiwebmanager, fortiweb manager +1 moreAn improper access control vulnerability in Fortinet FortiWebManager 5.8.0 allows anyone that can...9.8 Critical
- hclsoftware bigfix platformIBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) does not require that users should have...9.8 Critical
- apple mac os xAn issue was discovered in certain Apple products. macOS before 10.13 Supplemental Update is...5.5 Medium
- epson easympThe Epson "EasyMP" software is designed to remotely stream a users computer to supporting...9.8 Critical
- sma sunny boy 1.5 firmware, sunny boy 2.5 firmware, sunny boy 3.0 firmware +36 more +38 more** DISPUTED ** An issue was discovered in SMA Solar Technology products. All inverters have a...9.8 Critical
- ibm api connect, api management +1 moreIBM API Connect 5.0.0.0 could allow a user to bypass policy restrictions and create non-compliant...5.9 Medium
- rockwellautomation 1763-l16awa series a, 1763-l16awa series b, 1763-l16bbb series a +17 more +19 moreA Weak Password Requirements issue was discovered in Rockwell Automation Allen-Bradley MicroLogix...9.8 Critical
- ibm bigfix security compliance analytics, endpoint manager for security and compliance +1 moreIBM BigFix Compliance (TEMA SUAv1 SCA SCM) 1.9.70 does not require that users should have strong...9.8 Critical
- trendmicro interscan web security virtual applianceTrend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 before CP 1746 mismanages...6.5 Medium
- riverbed rios** DISPUTED ** Riverbed RiOS through 9.6.0 has a weak default password for the secure vault,...6.4 Medium
- riverbed rios** DISPUTED ** Riverbed RiOS through 9.6.0 does not require a bootloader password, which makes it...4.6 Medium
- siemens ruggedcom rugged operating systemRuggedCom Rugged Operating System (ROS) before 3.3 has a factory account with a password derived...8.5 High