CWE-522: Insufficiently Protected Credentials
The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
A kind of CWE-1390 Weak Authentication.
From the CWE List. © The MITRE Corporation.
Newest
- ibm api connect Multiple Vulnerabilities in IBM API Connect 5.4 Medium
- jetbrains toolbox app In JetBrains Toolbox App before 3.6.1 nTLM hash disclosure was possible via SVG tool icons from a... 6.5 Medium
- hcl aion HCL AION is affected by multiple security vulnerabilities. 3.3 Low
- btcpay server server BTCPay Server < 2.4.2 LND Macaroon Credential File Disclosure 9.3 Critical
- eclipse foundation basyx helm charts Keycloak admin client secret stored in cleartext in a ConfigMap in Eclipse BaSyx Helm Charts 7.5 High
- eclipse foundation basyx helm charts Keycloak admin user password stored in cleartext in a ConfigMap in Eclipse BaSyx Helm Charts 7.5 High
- apache software foundation juneau Apache Juneau: REST client forwards credentials to a different origin when following HTTP redirects 10.0 Critical
- shenzhen shine industrial co., ltd. vitafit VitaFit Cloud API Broken Access Control via S3 Token Endpoint 9.3 Critical
- xerrors yuxi Yuxi sandbox isolation failure allows cross-tenant access and internal service compromise 9.9 Critical
- sonatype nexus repository 3 Nexus Repository 3 - Insufficiently Protected Credentials in Repository Signing Passphrase 7.1 High
- sonatype nexus repository 3 Nexus Repository 3 - Insufficiently Protected Credentials in YUM Repository Signing Key 7.1 High
- sensiolabs symfony Symfony: ScopingHttpClient Sends the Credentials of Its Default Scope to Other Origins Through Network-Path References 8.2 High
- djangoproject django Password hash disclosure to "view only" admin users with custom user models 2.1 Low
- eclipse foundation mnestix Unauthenticated SSRF with MNESTIX_BACKEND_API_KEY disclosure in Eclipse Mnestix Browser server actions for configured Infrastructures 9.2 Critical
- chainguard kaniko kaniko can send the build's Azure (Entra ID) access token to lookalike ACR registry hosts 9.3 Critical
- pgadmin 4, pgadmin.org pgadmin 4 +1 more pgAdmin 4: Materialized view refresh redirects its connection through a crafted database name 7.1 High
- pgadmin 4, pgadmin.org pgadmin 4 +1 more pgAdmin 4: libpq uses the pgAdmin service account's own password file and client certificate 7.1 High
- pgadmin 4, pgadmin.org pgadmin 4 +1 more pgAdmin 4: Connection services are not restricted in server mode 7.1 High
- pgadmin 4, pgadmin.org pgadmin 4 +1 more pgAdmin 4: libpq uses the pgAdmin service account's Kerberos credentials 7.1 High
- pgadmin 4, pgadmin.org pgadmin 4 +1 more pgAdmin 4: SSH tunnels use the pgAdmin service account's own SSH identity 7.1 High
- socfortress copilot SOCFortress CoPilot: Unauthenticated Exposure of ScoutSuite Reports and Uploaded GCP Service-Account Key via Static Mount 9.3 Critical
- dell openmanage enterprise Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Insufficiently Protected... 4.3 Medium
- prometheus Prometheus through 3.15.1 Credential Leak via remote_write Cross-Host Redirects 6.3 Medium
- sigstore sigstore-js @sigstore/oci sends the registry Authorization header to a cross-host blob-upload Location 7.4 High
- progress software ws ftp server Password Disclosure via Activity Logs Enabling Administrator Privilege Escalation in WS_FTP Server 6.6 Medium
- progress software ws ftp server Improper Authentication in Progress WS_FTP Server 10.0 Critical
- ibm langflow oss, langflow +1 more Langflow OSS is affected by multiple vulnerabilities 6.5 Medium
- ibm langflow oss, langflow +1 more Langflow OSS is affected by multiple vulnerabilities 6.5 Medium
- grafana enterprise, oss +1 more Azure Monitor access token disclosure via SSRF 7.7 High
- acronis cyber protect 17 Sensitive information disclosure due to insufficiently protected credentials. The following... 5.3 Medium
- eaglecloud aquila Insufficiently protected credentials in EagleCloud Aquila on-premises version 8.7 High
- ctfer-io terraform-provider-ctfd CTFer.io's CTFd Terraform Provider allows a local or remote attacker to read team passwords in state as non sensitive values 7.1 High
- broadcom symantec ghost solution suite Security Advisory for offline recovery of Symantec GSS 3.3 RU11 stored domain credentials 6.8 Medium
- benoitc hackney HTTP/1.1 and HTTP/2 redirects resend basic_auth and cookie to a different scheme or port in hackney 6.0 Medium
-
fastmcpPyPI,fastmcp-slimPyPI +1 more FastMCP MCP client wrappers construct M2M OAuth providers without issuer binding — client secret redirectable to attacker-advertised authorization server 5.9 Medium - agentfront mcp-from-openapi mcp-from-openapi 2.2.0 before 2.9.0 SSRF blockedHosts Bypass via Trailing-Dot Hostname 6.3 Medium
- agentfront mcp-from-openapi mcp-from-openapi from 2.5.0 before 2.9.0 Credential Leak via Cross-Origin Redirects 6.3 Medium
- lxc incus LXC Incus 6.0.3 before 6.0.7, 6.6.0 before 7.0.2, and 7.1.0 before 7.5.0 Bucket Credential Disclosure via Storage Bucket Keys Endpoints 7.1 High
- hcl software appscan integration with azure boards for asoc & a360 Multiple security vulnerabilities affect HCL AppScan Azure Boards Plugin (CVE-2026-12143 and CVE-2026-13149) 3.8 Low
- newtype infortech nt oneapp NewType Infortech｜NT OneAPP - Credential Disclosure 5.9 Medium
- google sam Unauthenticated Biscuit Credential Disclosure via GET /enroll/status in Google OSS Agent Mesh (SAM) 8.8 High
- triggerdotdev trigger.dev Trigger.dev 4.5.0 before 4.6.0 Dashboard Agent User Token Disclosure via Session Records 5.1 Medium
- apostrophecms apostrophe, uploadfs +1 more ApostropheCMS uploadfs Azure backend leaks account-level SAS token into every public attachment URL (sas: true) 5.6 Medium
- a2aproject a2a-java A2A Java SDK: Android synchronous POST forwards credentials across authorities after incomplete redirect fix 7.5 High
- a2aproject a2a-java A2A Java SDK send client credentials under server-controlled HTTP header name, enabling leakage via redirect 5.7 Medium
- gdevelop GDevelop through 5.6.284 Cookie Leak via LocalFileDownloader Resource URLs 5.3 Medium
- coder Coder before 2.35.4 Credential Theft via Workspace Proxy Hostname Prefix Match 8.7 High
- getarcaneapp arcane Arcane: Container-registry credential exfiltration via URL repoint + test to attacker host 8.5 High
- opensuse tumbleweed, suse opensuse leap 16.1, linux enterprise server 16.1 +1 more +3 more sdbootutil: qrencode invocation leaks PIN/recovery key in /proc/<pid>/cmdline 5.9 Medium
- No product listed An issue in Trisolutions BRPerfX version 1.4.4.0 exposes LDAP credentials in plaintext within the... 7.5 High
- Show olderLoading…