CWE-521: Weak Password Requirements
The product does not require that users should have strong passwords.
A kind of CWE-1391 Use of Weak Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- quickheal total securityQuick Heal Total Security before 19.0 allows attackers with local admin rights to modify...4.4 Medium
- pulsesecure pulse secure desktopPulse Secure Desktop Client 9.0Rx before 9.0R5 and 9.1Rx before 9.1R4 on Windows reveals users'...3.8 Low
- jfrog artifactoryJFrog Artifactory does not enforce default admin password change9.8 Critical
- brocade fabric os, broadcom fabric operating system +1 moreSupportlink CLI in Brocade Fabric OS Versions v8.2.1 through v8.2.1d, and 8.2.2 versions before...8.8 High
- cpanelIn cPanel before 88.0.3, an insecure site password is used for Mailman on a templated VM (SEC-551).7.5 High
- ibm guardium data encryption, security guardium data encryption, guardium for cloud key management +2 moreIBM Security Guardium Data Encryption (GDE) 3.0.0.2 does not require that users should have...7.4 High
- textpatternIn Textpattern 4.5.7, the password-reset feature does not securely tether a hash to a user account.5.3 Medium
- etcd-io etcd, fedoraproject fedora +1 moreNo minimum password length in etcd5.8 Medium
- ibm security key lifecycle managerIBM Tivoli Key Lifecycle Manager does not require that users should have strong passwords by...7.4 High
- schneider-electric easergy builderA CWE-521: Weak Password Requirements vulnerability exists in Easergy Builder (Version 1.4.7.2...7.5 High
- avertx hd438 firmware, hd838 firmware +1 moreAn issue was discovered in AvertX Auto focus Night Vision HD Indoor/Outdoor IP Dome Camera HD838...9.8 Critical
- mattermost serverMattermost Server does not enforce rate limits on password change attempts7.5 High
- schneider-electric gp-pro ex firmwareA CWE-521: Weak Password Requirements vulnerability exists in the GP-Pro EX V1.00 to V4.09.100...6.5 Medium
- ibm qradar network packet capture, qradar network packet capture software +1 moreIBM QRadar Network Packet Capture 7.3.0 - 7.3.3 Patch 1 and 7.4.0 GA does not require that users...5.9 Medium
- ibm security identity governance and intelligenceIBM Security Identity Governance and Intelligence 5.2.6 does not require that users should have...5.9 Medium
- blaauwproducts remote kiln controlWeak password requirements in Blaauw Remote Kiln Control through v3.00r4 allow a user to set...7.5 High
- oklok project oklokThe OKLOK (3.1.1) mobile companion app for Fingerprint Bluetooth Padlock FB50 (2.3) has weak...9.8 Critical
- netgear insightThe NETGEAR Insight application before 2.42 for Android and iOS is affected by password...9.8 Critical
- evenroute iqrouter firmwareIn IQrouter through 3.3.1, the Lua function reset_password in the web-panel allows remote...9.8 Critical
- abb esomsABB eSOMS: Password complexity issue6.5 Medium
- moxa eds-510e firmware, eds-g516e firmware +1 moreIn Moxa EDS-G516E Series firmware, Version 5.2 or lower, weak password requirements may allow an...9.8 Critical
- moxa pt-7528-12msc-12tx-4gsfp-hv-hv firmware, pt-7528-12msc-12tx-4gsfp-hv firmware, pt-7528-12msc-12tx-4gsfp-wv-wv firmware +52 more +54 moreIn Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9...9.8 Critical
- auto-maskin dcu 210e firmware, marine pro observer, rp 210e firmware +2 moreIn Auto-Maskin RP210E Versions 3.7 and prior, DCU210E Versions 3.7 and prior and Marine Observer...7.5 High
- moxa mb3170 firmware, mb3180 firmware, mb3270 firmware +3 more +5 moreAn issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480...9.8 Critical
- iteris vantage velocity firmwareIteris Vantage Velocity Field Unit 2.3.1 and 2.4.2 devices have two users that are not documented...9.8 Critical
- voatzThe Voatz application 2020-01-01 for Android allows only 100 million different PINs, which makes...5.9 Medium
- teamviewer desktop, teamviewer +1 moreTeamViewer Desktop through 14.7.1965 allows a bypass of remote-login access control because the...7.0 High
- canonical cloud-init, debian linux, opensuse leap +2 moreIn cloud-init through 19.4, rand_user_password in cloudinit/config/cc_set_passwords.py has a...5.5 Medium
- plonePlone allows weak passwords7.5 High
- sonicwall email security applianceWeak default password cause vulnerability in SonicWall Email Security appliance which leads to...9.8 Critical
- neuvectorNeuVector 3.1 when configured to allow authentication via Active Directory, does not enforce non...9.8 Critical
- trend micro mobile security for android (consumer), trendmicro mobile security +1 moreTrend Micro Mobile Security for Android (Consumer) versions 10.3.1 and below on Android 8.0+ has...9.8 Critical
- barco clickshare cs-100 firmware, clickshare cse-200\+ firmware, clickshare cse-200 firmware +1 more +3 moreBarco ClickShare Button R9861500D01 devices before 1.9.0 have Insufficiently Protected...6.8 Medium
- gpw, debian linux +1 moregpw generates shorter passwords than required7.5 High
- samba, fedoraproject fedora, opensuse leap +2 moreA flaw was found in Samba, all versions starting samba 4.5.0 until samba 4.9.15, samba 4.10.10,...4.2 Medium
- ibm security key lifecycle managerIBM Security Key Lifecycle Manager 3.0 and 3.0.1 does not require that users should have strong...5.9 Medium
- dell rsa archer, rsa archer +1 moreRSA Archer, versions prior to 6.6 P2 (6.6.0.2), contain an improper authentication vulnerability....8.1 High
- siemens sinema remote connect serverA vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1)....9.8 Critical
- ibm intelligent operations center, intelligent operations center for emergency management, water operations for waternamics +2 moreIBM Intelligent Operations Center V5.1.0 - V5.2.0, IBM Intelligent Operations Center for...5.9 Medium
- ibm pureapplication systemIBM PureApplication System 2.2.3.0 through 2.2.5.3 does not require that users should have strong...5.9 Medium
- ibm intelligent operations center, intelligent operations center for emergency management, water operations for waternamics +2 moreIBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 does not require that users should...5.9 Medium
- westerndigital my cloud pr4100 firmware, my cloud dl2100 firmware, my cloud dl4100 firmware +6 more +8 moreWestern Digital My Cloud, My Cloud Mirror Gen2, My Cloud EX2 Ultra, My Cloud EX2100, My Cloud...9.8 Critical
- ibm security privileged identity managerIBM Security Privileged Identity Manager Virtual Appliance 2.2.1 does not require that users...5.9 Medium
- dlink dir-825 rev.b firmwareAn issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. The "user" account has a blank...9.8 Critical
- enphase envoyA weak password vulnerability was discovered in Enphase Envoy R3.*.*. One can login via TCP port...7.2 High
- mobotix s14 firmwareAn issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. /admin/access accepts a request to...9.8 Critical
- ibm security identity managerIBM Security Identity Manager 6.0.0 does not require that users should have strong passwords by...5.9 Medium
- ibm security guardiumIBM Security Guardium 10.0, 10.0.1, 10.1, 10.1.2, 10.1.3, 10.1.4, and 10.5 Database Activity...5.9 Medium
- open dental dental, opendental +1 moreOpen Dental before version 18.4 installs a mysql database and uses the default credentials of ...9.8 Critical
- roche accu-chek inform ii firmware, base unit hub firmware, coaguchek firmware +1 more +3 moreAn issue was discovered in Roche Accu-Chek Inform II Base Unit / Base Unit Hub before 03.01.04...8.8 High
- Show moreLoading…