CWE-522: Insufficiently Protected Credentials
The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
A kind of CWE-1390 Weak Authentication.
From the CWE List. © The MITRE Corporation.
Newest
- bluecats reveal, bc reveal +1 moreBlueCats Reveal iOS App Insecure Storage2.8 Low
- bluecats revealBlueCats Reveal Android App Insecure Storage2.8 Low
- eaton halo homeEaton Halo Home Android App Insecure Storage2.8 Low
- intel atom 230 firmware, atom 330 firmware, atom x5-e3930 firmware +25 more +27 moreInsufficient key protection vulnerability in silicon reference firmware for Intel(R) Pentium(R)...4.4 Medium
- ovirt cockpit-ovirtDuring HE deployment via cockpit-ovirt, cockpit-ovirt generates an ansible variable file `/var...5.6 Medium
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +11 more +13 moreAn elevation of privilege vulnerability exists when the Windows Kernel improperly handles key...7.8 High
- siemens logo! 8 bm (incl. siplus variants), logo\!8 bm firmware +1 moreA vulnerability has been identified in LOGO!8 BM (All versions). Unencrypted storage of passwords...7.5 High
- debian linux, lemonldap-ng lemonldap\ +1 moreLemonLDAP::NG -2.0.3 has Incorrect Access Control.9.8 Critical
- simple better bankingThe Simple - Better Banking application 2.45.0 through 2.45.3 (fixed in 2.46.0) for Android was...6.6 Medium
- eye-disk eyediskeyeDisk implements the unlock feature by sending a cleartext password. The password can be...6.8 Medium
- humhub calendarInformation exposure through process environment vulnerability in Synology Calendar before 2.3.3...5.5 Medium
- crestron am-100 firmware, am-101 firmware, airmedia +2 moreCrestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 stores usernames,...7.8 High
- jenkins azure ad, jenkins project azure ad plugin +1 moreJenkins Azure AD Plugin stored the client secret unencrypted8.8 High
- jenkins aqua microscanner, jenkins project aqua microscanner plugin +1 moreJenkins Aqua MicroScanner Plugin stored credentials in plain text8.8 High
- jenkins twitter, jenkins project twitter plugin +1 moreJenkins Twitter Plugin stores credentials in plain text8.8 High
- robotronic runasspcRobotronic RunAsSpc 3.7.0.0 protects stored credentials insufficiently, which allows locally...7.8 High
- gradle enterpriseIn Gradle Enterprise before 2018.5.3, Build Cache Nodes did not store the credentials at rest in...9.8 Critical
- cloudbees jenkins operations centerCloudBees Jenkins Operations Center 2.150.2.3, when an expired trial license exists, allows...9.8 Critical
- jenkins azure publishersettings credentials, jenkins project azure publishersettings credentials plugin +1 moreJenkins Azure PublisherSettings Credentials Plugin stored credentials in plain text8.8 High
- jenkins jira-ext, jenkins project jira-ext plugin +1 moreJenkins jira-ext Plugin stores credentials unencrypted8.8 High
- f5 big-ip apm, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 morePlatform dependent weakness. This issue only impacts iSeries platforms. On these platforms, in...9.8 Critical
- aveva wonderware system platformAVEVA Wonderware System Platform 2017 Update 2 and prior uses an ArchestrA network user account...8.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: 'set system ports console insecure' allows root password recovery on OAM volumes6.8 Medium
- juniper service insight, service now +1 moreJunos Space Service Now and Service Insight: Organization username and password stored in plaintext in log files.6.5 Medium
- rapid7 insightvmRapid7 InsightVM Stored Credential Exposure3.1 Low
- zyxel nas326 firmwareA plaintext password vulnerability in the Zyxel NAS 326 through 5.21 allows an elevated...8.8 High
- jenkins cloudcoreo deploytime, jenkins project cloudcoreo deploytime plugin +1 moreJenkins CloudCoreo DeployTime Plugin stores credentials in plain text8.8 High
- jenkins koji, jenkins project koji plugin +1 moreJenkins Koji Plugin stores credentials in plain text8.8 High
- jenkins sametime, jenkins project sametime plugin +1 moreJenkins Sametime Plugin stores credentials in plain text8.8 High
- jenkins serena sra deploy, jenkins project serena sra deploy plugin +1 moreJenkins Serena SRA Deploy Plugin stores credentials in plain text8.8 High
- jenkins crittercism-dsym, jenkins project crittercism-dsym plugin +1 moreJenkins crittercism-dsym Plugin stores API key in plain text8.8 High
- jenkins kmap, jenkins project kmap plugin +1 moreJenkins Kmap Plugin stores credentials in plain text8.8 High
- jenkins netsparker cloud scan, jenkins project netsparker cloud scan plugin +1 moreJenkins Netsparker Enterprise Scan Plugin stored credentials in plain text8.8 High
- jenkins jabber server, jenkins project jabber server plugin +1 moreJenkins Jabber Server Plugin stores credentials in plain text8.8 High
- jenkins youtrack-plugin, jenkins project youtrack-plugin plugin +1 moreJenkins youtrack-plugin Plugin stored credentials in plain text8.8 High
- jenkins deployhub, jenkins project deployhub plugin +1 moreJenkins DeployHub Plugin stores credentials in plain text8.8 High
- jenkins minio storage, jenkins project minio storage plugin +1 moreJenkins Minio Storage Plugin stores credentials in plain text8.8 High
- jenkins diawi upload, jenkins project diawi upload plugin +1 moreJenkins Diawi Upload Plugin stores credentials in plain text8.8 High
- jenkins mabl, jenkins project mabl plugin +1 moreJenkins mabl Plugin stores credentials in plain text8.8 High
- jenkins klaros-testmanagement, jenkins project klaros-testmanagement plugin +1 moreJenkins Klaros-Testmanagement Plugin stores credentials in plain text8.8 High
- jenkins relution enterprise appstore publisher, jenkins project relution enterprise appstore publisher plugin +1 moreJenkins Relution Enterprise Appstore Publisher Plugin stores credentials in plain text8.8 High
- jenkins assembla auth, jenkins project assembla auth plugin +1 moreJenkins Assembla Auth Plugin stores credentials in plain text8.8 High
- jenkins starteam, jenkins project starteam plugin +1 moreJenkins StarTeam Plugin stores credentials in plain text8.8 High
- jenkins crowd integration, jenkins project crowd integration plugin +1 moreJenkins Crowd Integration Plugin stores credentials in plain text6.5 Medium
- jenkins testfairy, jenkins project testfairy plugin +1 moreJenkins TestFairy Plugin stores credentials in plain text6.5 Medium
- jenkins project ecs publisher plugin, trustsource ecs publisher +1 moreECS Publisher Plugin stored and displayed API token in plain text6.5 Medium
- portainerA vulnerability was found in Portainer before 1.20.0. Portainer stores LDAP credentials,...9.8 Critical
- redhat ovirt-engine, [unknown] rhv +1 moreIn ovirt-engine 4.1, if a host was provisioned with cloud-init, the root password could be...8.8 High
- envoy passport for android, passport for iphone, passport +2 moreEnvoy Passport for Android and Envoy Passport for iPhone could allow a local attacker to obtain...2.9 Low
- portierAn issue was discovered in portier vision 4.4.4.2 and 4.4.4.6. Passwords are stored using...9.8 Critical
- Show moreLoading…