CWE-521: Weak Password Requirements
The product does not require that users should have strong passwords.
A kind of CWE-1391 Use of Weak Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- ihatetobudget project ihatetobudgetBminusl IHateToBudget v1.5.7 employs a weak password policy which allows attackers to potentially...9.8 Critical
- hcl software inotes, hcltech hcl inotes, domino +2 moreHCL iNotes is susceptible to a Broken Password Strength Checks vulnerability.5.9 Medium
- iocoder ruoyi-vue-proRuoYi v3.8.3 has a Weak password vulnerability in the management system.9.8 Critical
- tabitTabit - password enumeration4.3 Medium
- notrinos notrinos/notrinoserp, notrinoserp +1 moreWeak Password Requirements in notrinos/notrinoserp7.3 High
- mealieMealie 1.0.0beta3 employs weak password requirements which allows attackers to potentially gain...9.8 Critical
- contract management system project managment systemContract Management System v2.0 contains a weak default password which gives attackers to access...7.5 High
- ibm robotic process automation, robotic process automation for cloud pak +1 moreIBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 does not require that users should have...4.6 Medium
- raneto project ranetoRaneto v0.17.0 employs weak password complexity requirements9.8 Critical
- bosch bf-osBF-OS version 3.x up to and including 3.83 do not enforce strong passwords which may allow a...9.8 Critical
- fortinet fortinacAn empty password in configuration file vulnerability [CWE-258] in FortiNAC version 8.3.7 and below, 8.5.2 and below, 8.5.4, 8.6.0, 8.6.5 and below, 8.7.6 and below, 8.8.11 and below, 9.1.5 and below,…8.8 High
- infiray iray-a8z3 firmwareAn issue was discovered in Infiray IRAY-A8Z3 1.0.957. There is a blank root password for TELNET...9.8 Critical
- verizon lvskihp indoorunit firmware, lvskihp outdoorunit firmware +1 moreOn Verizon 5G Home LVSKIHP InDoorUnit (IDU) 3.4.66.162 and OutDoorUnit (ODU) 3.33.101.0 devices,...7.5 High
- secheron sepcos control and protection relay firmware package, sepcos control and protection relay firmware +1 moreSecheron SEPCOS Control and Protection Relay9.8 Critical
- trendnet tew-831dr firmwareAn issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. The default pre-shared key...8.8 High
- kromit titra, kromitgmbh kromitgmbh/titra +1 moreWeak Password Requirements in kromitgmbh/titra7.1 High
- dell powerscale onefsDell PowerScale OneFS versions 8.2.0.x through 9.3.0.x, contain a weak password requirement...8.1 High
- verizon 4g lte network extender firmwareVerizon 4G LTE Network Extender GA4.38 - V0.4.038.2131 utilizes a weak default admin password...7.5 High
- polonel polonel/trudesk, trudesk project trudesk +1 moreWeak Password Requirements in polonel/trudesk8.4 High
- zammadA lack of password length restriction in Zammad v5.1.0 allows for the creation of extremely long...7.5 High
- red lion da50n, redlion da50n firmware +1 moreICSA-22-104-03 Red Lion DA50N9.6 Critical
- weseek growi, weseek/growi +1 moreWeak Password Requirements in weseek/growi4.3 Medium
- ibm maximo asset managementIBM Maximo Asset Management 7.6.1.2 does not require that users should have strong passwords by...5.9 Medium
- daybydaycrm daybyday crm, bottelet daybydaycrm, flarepoint +2 moreDayByDay CRM - Weak Password Requirements in Update User7.5 High
- ibm spectrum copy data managementIBM Spectrum Copy Data Management 2.2.13 and earlier has weak authentication and password rules...5.9 Medium
- globaldatingsoftware premiumdatingscriptAn authentication bypass (account takeover) vulnerability exists in Premiumdatingscript 4.2.7.7...6.5 Medium
- canon lbp223dw firmwareIn Canon LBP223 printers, the System Manager Mode login does not require an account password or...7.5 High
- kaseya unitrends backupAn issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The password for the...9.8 Critical
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.1.7 and 11.2.0 does not require that users should have strong passwords...5.9 Medium
- hitachi energy fox61x, xcm20, hitachienergy fox615 firmware +1 more +3 moreWeak default credential associated with TCP port 269.0 Critical
- airangel hsmx-app-1000 firmware, hsmx-app-100 firmware, hsmx-app-20000 firmware +2 more +4 moreAirangel HSMX Gateway devices through 5.2.04 have Weak SSH Credentials.9.8 Critical
- sophos secure workspace for android, secure workspace +1 moreA local attacker could bypass the app password using a race condition in Sophos Secure Workspace...5.9 Medium
- inhand networks ir615 router, inhandnetworks ir615 firmware +1 moreInHand Networks IR615 Router9.8 Critical
- tibco ebx, product and service catalog powered by tibco ebx +1 moreTIBCO EBX Insecure Login Mechanism9.8 Critical
- ecoa ecs router controller ecs (flash), ecs router controller-ecs firmware, graphic control software +6 more +8 moreECOA BAS controller - Weak Password Requirements9.8 Critical
- bab-technologie eibport firmwareBAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow the user to set a weak password because...6.5 Medium
- bab-technologie eibport firmwareBAB TECHNOLOGIE GmbH eibPort V3. Each device has its own unique hard coded and weak root SSH key...7.2 High
- ibm security guardiumIBM Security Guardium 11.2 does not require that users should have strong passwords by default,...4.7 Medium
- cisco connected mobile experiencesCisco Connected Mobile Experiences Strong Authentication Requirements Enforcement Bypass4.3 Medium
- edgexfoundry edgex foundry, edgex-go +1 moreWeak password in API gateway in EdgeX Foundry Edinburgh, Fuji, Geneva, and Hanoi releases allows remote attackers to obtain authentication token via dictionary-based password attack when OAuth2 authen…8.3 High
- open-emr openemrIn OpenEMR, versions 5.0.0 to 6.0.0.1 are vulnerable to weak password requirements as it does not...8.1 High
- minthcmA weak password requirement vulnerability exists in the Create New User function of MintHCM...9.8 Critical
- hametech hame sd1 wi-fi firmwareAn access control vulnerability in Hame SD1 Wi-Fi firmware <=V.20140224154640 allows an attacker...9.8 Critical
- luvion grand elite 3 connect, grand elite 3 connect firmware +1 moreAn issue was discovered in Luvion Grand Elite 3 Connect through 2020-02-25. Authentication to the...8.8 High
- hackerone nextcloud server, nextcloud server, fedoraproject fedora +2 moreNextcloud Server prior to 20.0.0 stores passwords in a recoverable format even when external...6.7 Medium
- gigaset dx600a firmwareThe telnet administrator service running on port 650 on Gigaset DX600A v41.00-175 devices does...9.8 Critical
- moxa nport iaw5000a-i/o, nport iaw5000a-i\/o firmware +1 moreMOXA NPort IAW5000A-I/O Series9.8 Critical
- docker registryVersions of the Official registry Docker images through 2.7.0 contain a blank password for the...9.8 Critical
- askey ap5100w firmwareAskey AP5100W_Dual_SIG_1.01.097 and all prior versions use a weak password at the Operating...9.8 Critical
- quickheal total securityQuick Heal Total Security before 19.0 allows attackers with local admin rights to obtain access...6.7 Medium
- Show moreLoading…