CWE-522: Insufficiently Protected Credentials
The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
A kind of CWE-1390 Weak Authentication.
From the CWE List. © The MITRE Corporation.
Newest
- mariadb, oracle mysql +1 moreOracle MySQL and MariaDB 5.5.x before 5.5.29, 5.3.x before 5.3.12, and 5.2.x before 5.2.14 does...4.0 Medium
- openstack keystone, redhat openstack, canonical ubuntu linux +1 more +3 moreOpenStack Identity (Keystone) Folsom, Grizzly 2013.1.3 and earlier, and Havana before havana-3...6.5 Medium
- cisco unified communications managerCisco Unified Communications Manager (CUCM) 7.1(x) through 9.1(2) and the IM & Presence Service...0.0 Low
- hp 0150a129, 0150a12a, 0150a12b +672 more +674 moreCertain HP Access Controller, Fabric Module, Firewall, Router, Switch, and UTM Appliance products...3.5 Low
- tridium niagara axThe default configuration of Tridium Niagara AX Framework through 3.6 uses a cleartext base64...5.0 Medium
- tridium niagara axTridium Niagara AX Framework does not properly store credential data, which allows context...7.8 High
- extcalendar project extcalendarprofile.php in ExtCalendar 2 and earlier allows remote attackers to change the passwords of...9.8 Critical
- archilles newsworldadmin_news.php in Archilles Newsworld up to 1.3.0 allows attackers to bypass authentication by...9.8 Critical
- cgi script center news updateCGI Script Center News Update 1.1 does not properly validate the original news administration...9.8 Critical
- sshStolen credentials from SSH clients via ssh-agent program, allowing other local users to access...7.5 High