CWE-522: Insufficiently Protected Credentials
The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
A kind of CWE-1390 Weak Authentication.
From the CWE List. © The MITRE Corporation.
Newest
- veritas netbackup applianceAn issue was discovered in the Web Console in Veritas NetBackup Appliance through 3.1.2. The SMTP...7.2 High
- veritas netbackup applianceAn issue was discovered in the Web Console in Veritas NetBackup Appliance through 3.1.2. The...7.2 High
- jenkins appdynamics, jenkins project jenkinsappdynamics dashboard plugin +1 moreJenkins AppDynamics Dashboard Plugin has insufficiently protected credentials8.8 High
- jenkins repository connector, jenkins project repository connector plugin +1 moreJenkins Repository Connector Plugin has insufficiently protected credentials7.8 High
- cloudfoundry container runtime, cloud foundry container runtime (cfcr) +1 moreCloud Foundry Container Runtime Leaks IAAS Credentials9.1 Critical
- ibm rational clearcaseIBM Rational ClearCase 1.0.0.0 GIT connector does not sufficiently protect the document database...7.5 High
- cloud foundry credhub cliCredHub CLI writes environment variable credentials to disk6.3 Medium
- ics-cert pr100088 modbus gateway, kunbus pr100088 modbus gateway firmware +1 moreAn attacker could retrieve plain-text credentials stored in a XML file on PR100088 Modbus gateway...7.2 High
- gnome keyring, canonical ubuntu linux, oracle zfs storage appliance kit +2 moreIn pam/gkr-pam-module.c in GNOME Keyring before 3.27.2, the user's password is kept in a session...7.8 High
- kentico xperience** DISPUTED ** Kentico v10.0.42 allows Global Administrators to read the cleartext SMTP Password...7.2 High
- teampassTeamPass Storing Passwords in a Recoverable Format vulnerability9.8 Critical
- articatech artica proxyArtica Proxy 3.06.200056 allows remote attackers to execute arbitrary commands as root by reading...7.2 High
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Password Recovery Vulnerability4.3 Medium
- cisco unified communications managerCisco Unified Communications Manager Digest Credentials Disclosure Vulnerability4.3 Medium
- sonarsource sonarqube scannerJenkins SonarQube Scanner Plugin stored server authentication token in plain text7.8 High
- jfrog artifactoryJenkins Artifactory Plugin stored old directly entered credentials unencrypted on disk7.8 High
- atlassian crowd2Jenkins Crowd 2 Integration Plugin stored credentials in plain text7.8 High
- battelle v2i hubBattelle V2I Hub 2.5.1 could allow a remote attacker to obtain sensitive information, caused by...9.8 Critical
- nec univerge sv9100 webpro firmwareNEC Univerge Sv9100 WebPro 6.00.00 devices have Cleartext Password Storage in the Web UI.9.8 Critical
- dlink dcm-604 firmware, dcm-704 firmware +1 moreD-Link DCM-604 DCM604_C1_ViaCabo_1.04_20130606 and DCM-704 EU_DCM-704_1.10 devices allow remote...9.8 Critical
- technicolor cga0111 firmwareTechnicolor CGA0111 CGA0111E-ES-13-E23E-c8000r5712-170217-0829-TRU devices allow remote attackers...9.8 Critical
- technicolor tc7200.d1i firmwareTechnicolor TC7200.d1I TC7200.d1IE-N23E-c7000r5712-170406-HAT devices allow remote attackers to...9.8 Critical
- technicolor tc7110.b firmwareTechnicolor TC7110.B STC8.62.02 devices allow remote attackers to discover Wi-Fi credentials via...9.8 Critical
- technicolor tc7200.th2v2 firmwareTechnicolor TC7200.TH2v2 SC05.00.22 devices allow remote attackers to discover Wi-Fi credentials...9.8 Critical
- technicolor cwa0101 firmwareTechnicolor CWA0101 CWA0101E-A23E-c7000r5712-170315-SKC devices allow remote attackers to...9.8 Critical
- technicolor dpc3928sl firmwareTechnicolor DPC3928SL D3928SL-PSIP-13-A010-c3420r55105-170214a devices allow remote attackers to...9.8 Critical
- technicolor tc7110.ar firmwareTechnicolor TC7110.AR STD3.38.03 devices allow remote attackers to discover Wi-Fi credentials via...9.8 Critical
- mi xiaomi mi-a1 firmwareAn issue was discovered on Xiaomi Mi A1 tissot_sprout:8.1.0/OPM1.171019.026/V9.6.4.0.ODHMIFE...9.8 Critical
- zoomtel 5352 firmwareZoom 5352 v5.5.8.6Y devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491...9.8 Critical
- ubeeinteractive dvw2108 firmware, dvw2110 firmware +1 moreUbee DVW2108 6.28.1017 and DVW2110 6.28.2012 devices allow remote attackers to discover...9.8 Critical
- motorola sbg901 firmware, sbg941 firmware, svg1202 firmware +2 moreMotorola SBG901 SBG901-2.10.1.1-GA-00-581-NOSH, SBG941 SBG941-2.11.0.0-GA-07-624-NOSH, and...9.8 Critical
- skyworthdigital cm5100-440 firmware, cm5100-511 firmware, cm5100-ghd00 firmware +2 more +4 moreSkyworth CM5100 V1.1.0, CM5100-440 V1.2.1, CM5100-511 4.1.0.14, CM5100-GHD00 V1.2.2, and CM5100...9.8 Critical
- mplustec cbc383z firmwaremplus CBC383Z CBC383Z_mplus_MDr026 devices allow remote attackers to discover credentials via iso...9.8 Critical
- telaum ming2120j firmware, ming6300 firmware +1 moreNET&SYS MNG2120J 5.76.1006c and MNG6300 5.83.6305jrc2 devices allow remote attackers to discover...9.8 Critical
- net-wave ming6200 firmwareNETWAVE MNG6200 C4835805jrc12FU121413.cpr devices allow remote attackers to discover credentials...9.8 Critical
- technicolor dwg849 firmware, dwg850-4 firmware, dwg855 firmware +1 more +3 moreThomson DWG849 STC0.01.16, DWG850-4 ST9C.05.25, DWG855 ST80.20.26, and TWG870 STB2.01.36 devices...9.8 Critical
- cisco dpc2100 firmwareS-A WebSTAR DPC2100 v2.0.2r1256-060303 devices allow remote attackers to discover credentials via...9.8 Critical
- teknotel cbw700n firmwareTEKNOTEL CBW700N 81.447.392110.729.024 devices allow remote attackers to discover credentials via...9.8 Critical
- kaonmedia cg2001-an22a firmware, cg2001-udbna firmware, cg2001-un2na firmware +2 moreKaonmedia CG2001-AN22A 1.2.1, CG2001-UDBNA 3.0.8, and CG2001-UN2NA 3.0.8 devices allow remote...9.8 Critical
- d-link dcm-604 firmware, dcm-704 firmware +1 moreD-Link DCM-604 DCM604_C1_ViaCabo_1.04_20130606 and DCM-704 EU_DCM-704_1.10 devices allow remote...9.8 Critical
- comtrend cm-6200un firmware, cm-6300n firmware +1 moreComtrend CM-6200un 123.447.007 and CM-6300n 123.553mp1.005 devices allow remote attackers to...9.8 Critical
- bnmux bcw700j firmware, bcw710j2 firmware, bcw710j firmware +2 moreBnmux BCW700J 5.20.7, BCW710J 5.30.6a, and BCW710J2 5.30.16 devices allow remote attackers to...9.8 Critical
- commscope arris sbg6580-2 firmwareARRIS SBG6580-2 D30GW-SEAEAGLE-1.5.2.5-GA-00-NOSH devices allow remote attackers to discover...9.8 Critical
- castlenet cbv38z4ec firmware, cbv38z4ecnit firmware, cbw383g4j firmware +1 more +3 moreCastleNet CBV38Z4EC 125.553mp1.39219mp1.899.007, CBV38Z4ECNIT 125.553mp1.39219mp1.899.005ITT,...9.8 Critical
- inovobb ib-8120-w21 firmware, ib-8120-w21e1 firmware +1 moreiNovo Broadband IB-8120-W21 139.4410mp1.004200.002 and IB-8120-W21E1 139.4410mp1.3921132mp1.899...9.8 Critical
- arris dg950s firmware, commscope arris dg950a firmware +1 moreARRIS DG950A 7.10.145 and DG950S 7.10.145.EURO devices allow remote attackers to discover...9.8 Critical
- jezetek-intl bcm93383wrg firmwareJiuzhou BCM93383WRG 139.4410mp1.3921132mp1.899.004404.004 devices allow remote attackers to...9.8 Critical
- elastic kibanaKibana versions 4.0 to 4.6, 5.0 to 5.6.12, and 6.0 to 6.4.2 contain an error in the way...9.8 Critical
- copay bitcoin walletCopay Bitcoin Wallet version 5.01 to 5.1.0 included. contains a Other/Unknown vulnerability in...9.8 Critical
- open dental dental, opendental +1 moreOpen Dental before version 18.4 stores user passwords as base64 encoded MD5 hashes.5.3 Medium
- Show moreLoading…