CWE-522: Insufficiently Protected Credentials
The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
A kind of CWE-1390 Weak Authentication.
From the CWE List. © The MITRE Corporation.
Newest
- openclaw, openclaw msteams +1 moreOpenClaw < 2026.5.27 Token Leakage via MS Teams Outbound Requests6.0 Medium
- icu scandinavia boomerangCredential exposure in ICU Scandinavia Boomerang7.1 High
- adobe c2pa, c2pa-web, c2patool +3 more +5 moreCAI Content Credentials | Insufficiently Protected Credentials (CWE-522)7.5 High
- forgekeep nebula-meshnebula-mesh: Operator session tokens stored in plaintext in the database7.1 High
- microsoft visual studio codeGitHub Copilot and Visual Studio Code Information Disclosure Vulnerability6.5 Medium
- sigstore sigstore-jsCredential confusion in @sigstore/oci can leak registry credentials to an attacker-controlled registry9.6 Critical
- exconExcon: redact additional sensitive/risky headers when following redirects6.5 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Unauthenticated disclosure of OAuth client credentials via an HTTP API endpoint with certain less common OAuth 2 configurations8.7 High
- n8nn8n: Shared Credential Header Leak via HTTP Request Pagination Expression7.1 High
- gitlabInsufficiently Protected Credentials in GitLab4.9 Medium
- openclawOpenClaw < 2026.5.28 - Credential Override via Workspace Dotenv Files8.4 High
- pleskIncorrect authorization in the XML-RPC API of WebPros Plesk before 18.0.78.4 allows a low...9.9 Critical
- haarg http::tiny, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 moreHTTP::Tiny versions before 0.095 for Perl forward credential headers to cross-origin redirect targets7.1 High
- decolua 9router9Router 0.4.41 - Unauthenticated Information Disclosure via API Usage Endpoints8.7 High
- decolua 9router9Router 0.4.41 - Unauthenticated API Key Exposure via /api/usage/stats9.3 Critical
- decolua 9router9Router 0.4.41 - Unauthenticated API Exposure via /api/providers9.3 Critical
- coderCoder's session token leaked to arbitrary hosts via `coder open app` for external workspace apps7.7 High
- nt-ware uniflow ulm (universal login manager) standaloneuniFLOW Universal Login Manager (ULM) Standalone Improper Protection of Sensitive Information Leads to Information Disclosure4.8 Medium
- gravitlauncher launcherGravitLauncher: Unauthenticated path traversal in LaunchServer FileServerHandler9.8 Critical
- kerberos-io agentKerberos Hub private key (X-Kerberos-Hub-PrivateKey) leaked to cross-host redirect target due to redirect-following HTTP client without CheckRedirect6.9 Medium
- openclawOpenClaw < 2026.6.5 Authorization Header Forwarding via SSE6.0 Medium
oras.land/oras-go/v2GoORAS Go forwards registry credentials across registry redirects6.9 Medium- suse rancher, rancher fleet +1 moreFleet has PSS Bypass through addLabelsFromOptions in Fleet Agent8.8 High
- cloudnative-pgCloudNativePG: Cleartext role passwords recorded in pg_stat_statements allow privileged tenant roles to recover the PostgreSQL superuser credential and achieve RCE in the database pod8.5 High
- google chromeInappropriate implementation in Passwords in Google Chrome prior to 150.0.7871.47 allowed a...6.5 Medium
- parseablehq parseableParseable < 2.9.2 - Cleartext Credential Exposure in Notification Target API7.1 High
- hitachi virtual storage platform 5100, 5200, 5500, 5600, 5100h, 5200h, 5500h, 5600h, vx8, virtual storage platform g1000, g1500, f1500, vx7 +1 moreInformation exposure vulnerability in Hitachi Storage Navigator6.8 Medium
- regclientregclient may leak authentication credentials to external blob stores6.8 Medium
- rustfsRustFS: ListRemoteTargetHandler authorization bypass leaks replication target credentials8.2 High
- dokkuDokku: Git Credentials in .netrc Stored World-Readable Due to Premature touch5.0 Medium
- evoke csmsEVoke Systems EVoke CSMS Insufficiently Protected Credentials6.9 Medium
- pnpmpnpm: Repository config can expand victim environment secrets into registry requests before scripts run6.5 Medium
- pnpmpnpm binds unscoped user-level npm auth credentials to a repository-selected registry6.9 Medium
- schneider electric easylogic t150 (formerly saitel dr) remote terminal unit & controller, saitel dp remote terminal unit & controller, schneider-electric easylogic t150 firmware +1 more +3 moreCWE-522 Insufficiently Protected Credentials vulnerability that could cause unauthorized access...8.7 High
- curlstale proxy password leak9.8 Critical
- curlpassword leak with netrc and user in URL9.1 Critical
- motioneye-project motioneyemotionEye: World-Readable Configuration File Exposes Admin Password Hash5.5 Medium
- getgrav gravGrav: Admin Backup Zip File Exposes Account Credentials and Configuration Secrets6.8 Medium
- crawl4aiCrawl4AI - LLM Credential Exfiltration via base_url and Environment Variable Resolution8.8 High
- openclawOpenClaw < 2026.5.12 - Custom Header Leakage via MCP Streamable HTTP Cross-Origin Redirects6.0 Medium
- aio-libs aiohttpAIOHTTP: DigestAuthMiddleware Applies Credentials to Cross-Origin Redirect Challenges6.3 Medium
- vitejs launch-editor, vite, vite-plus +2 moreNTLMv2 hash disclosure via UNC path handling on Windows5.5 Medium
- mattermost, mattermost desktop +1 moreMattermost Desktop App fails to restrict the allow list of domains which NTLM credentials are passed6.3 Medium
- openclawOpenClaw < 2026.5.2 - Credential Exposure via Model-Supplied Loopback URLs in message.action Forwarding6.0 Medium
- steipete codexbarCodexBar < 0.33.0 Credential Leakage via HTTP Redirect6.0 Medium
- ibm security qradar edrIBM Security QRadar EDR Software has a vulnerability where user credentials may be stored in plain text, potentially exposing sensitive information.4.1 Medium
- pipeboard-co meta-ads-mcpMeta Ads MCP: Unauthenticated HTTP MCP Tool Execution Leaks Operator Meta Access Token9.1 Critical
- hapijs wreck@hapi/wreck: Sensitive credential headers leak across cross-port and cross-scheme redirects6.5 Medium
- spring reactor nettyReactor Netty HTTP Client Leaks Credentials On Protocol Downgrade Redirect6.1 Medium
- openbullet openbullet2OpenBullet2 0.3.2 NTLMv2 Hash Disclosure via UNC Path Proxy Source7.1 High
- Show moreLoading…