CWE-522: Insufficiently Protected Credentials
The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
A kind of CWE-1390 Weak Authentication.
From the CWE List. © The MITRE Corporation.
Newest
- yhirose cpp-httplibcpp-httplib: Cookie header leaked on cross-origin redirect7.5 High
- curlpassword leak in CURLINFO_EFFECTIVE_URL7.5 High
- omnispace agora projectOmnispace Agora Project < 26.10.0 Insecure Remember-Me Token Storage9.1 Critical
- freerdpFreeRDP 3.0.0 before 3.32.0 Cleartext Credential Disclosure via /restricted-admin6.0 Medium
- ph7software ph7builderpH7Builder before 18.5.0 Sensitive Data Exposure via Member API UserController7.1 High
- dongdongbh mindwtrMindwtr: Cloud token and WebDAV password stored in plaintext on mobile4.4 Medium
- red lion controls 700 seriesRed Lion Controls N-Tron 700 Series Insufficiently Protected Credentials9.3 Critical
- No product listedRocket Software Rocket Remote Desktop 18.0.8583.1 is vulnerable to Insufficiently Protected...9.8 Critical
- python-mechanize mechanizeMechanize sends credential headers to another host after an HTTP redirect6.8 Medium
- python-mechanize mechanizeMechanize sends credential headers to a different scheme or port after a redirect5.9 Medium
- python-mechanize mechanizeMechanize sends credential headers to another origin after a meta refresh6.8 Medium
- espocrmEspoCRM before 10.0.5 IDOR via PersonalAccount Service Exposes IMAP Passwords8.3 High
- eclipse ditto ditto explorer uiUnvalidated environments URL allows OAuth authorization code + PKCE verifier theft and account...7.1 High
- broadcom brocade active support connectivity gateway, brocade active support connectivity gateway +1 moreIn Brocade ASCG before 3.5.0, a local unauthorized user on the ASCG VM who can issue a request...8.4 High
- asynchttpclient async-http-clientAsyncHttpClient: WebSocket proxy credentials sent to the origin server over a CONNECT tunnel5.9 Medium
- asynchttpclient async-http-clientAsyncHttpClient: Replay to a different host sends the original host request and credentials to the new host9.4 Critical
- asynchttpclient async-http-clientAsyncHttpClient: Origin credentials sent in cleartext to a proxy that rejects the CONNECT7.5 High
- asynchttpclient async-http-clientAsyncHttpClient: Digest challenge without a usable nonce downgrades to Basic and sends the password in cleartext8.7 High
- cisco license on-premCisco License On-Prem Security Hardening Release9.1 Critical
- obot-platform obotObot 0.12.0 before 0.26.2 Credential Exposure via MCP Catalog Entry API7.1 High
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by multiple vulnerabilities7.7 High
- modelcontextprotocol typescript-sdkMCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server7.5 High
- twentyhq twentyTwenty: Plaintext IMAP/SMTP/CalDAV password disclosure to any workspace member via /metadata GraphQL9.6 Critical
- docling, docling-project docling-slim +1 moreDocling: Configured HTTP headers sent to every remote image host named by a document3.7 Low
- eclipse foundation che, the eclipse foundation eclipse che +1 moreIn Eclipse Che versions 7.29.0 and later, the GET `/api/scm/resolve` and `POST /api/factory...8.4 High
- monta monta.appMonta monta.app Insufficiently Protected Credentials6.9 Medium
- hascheksolutions pictsharePictShare < 3.7.1 Sensitive Information Disclosure via info API8.8 High
- n8n-io n8nn8n before 2.39.6 and 2.40.x before 2.40.1 Credentials Leak via preAuthentication Hook7.1 High
- satollo newsletter – send awesome emails from wordpressNewsletter <= 9.3.9 - Unauthenticated Insufficiently Protected Credentials via '/tnp/l/' Click-Tracking REST Endpoint (Raw Subscriber Token Cookie Disclosure)5.3 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.18991 stored SMTP server credentials could be disclosed by...2.7 Low
- anjvision yssd-rtmp-h5Insufficiently Protected Credentials in Anjvision YSSD-RTMP-H58.7 High
- apache apache-airflow-providers-snowflake, apache software foundation airflow snowflake provider +1 moreApache Airflow Snowflake provider: Unvalidated account field redirects SQL API bearer token off-domain6.3 Medium
- nezhahq nezhaNezha before 2.2.7 Information Disclosure via /api/v1/profile2.3 Low
- openclawOpenClaw before 2026.8.1 Credential Exposure via Endpoint Override6.8 Medium
- phpCross-origin credential leak in HTTP stream wrapper redirects5.9 Medium
- zammadZammad: Sensitive Information Exposure in Integration Administration API6.9 Medium
- goauthentik authentikauthentik: Stored credentials are readable with view permission alone8.1 High
- araxis mergeAraxis Merge insufficiently protected credentials6.8 Medium
- ibm datastage on cloud pak for dataDataStage on Cloud Pak for Data has several vulnerabilities7.7 High
- ibm financial transaction manager, financial transaction manager (ftm) for redhat openshift +1 moreIBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities6.5 Medium
- ibm financial transaction manager, financial transaction manager (ftm) for redhat openshift +1 moreIBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities8.8 High
- checkmk gmbh checkmkRedact SNMP community, SNMPv3 pass phrases, and IPMI password in host config REST API GET responses2.3 Low
- laurent22 joplinJoplin: KaTeX `trust:true` enables URL-allowlist bypass leading to NTLMv2 credential theft via UNC path on Windows2.5 Low
- sysadminsmedia homeboxHomeBox: Cross-Tenant IDOR in Notifier Update Leaks Shoutrrr Credentials and Allows Webhook Hijack8.1 High
- gocdGoCD is vulnerable to credential exposure when admins insecurely configure material URLs2.3 Low
- jimprosser obsidian-web-mcpObsidian Web MCP: Unauthenticated vault access: /oauth/authorize auto-approves without authenticating the user9.4 Critical
- asynchttpclient async-http-clientAsyncHttpClient: Origin credentials sent to the proxy on the plaintext CONNECT request5.9 Medium
- asynchttpclient async-http-clientAsyncHttpClient: Client-wide realm credentials re-sent to a cross-origin redirect target6.8 Medium
- asynchttpclient async-http-clientAsyncHttpClient: SOCKS proxy credentials sent to the origin server over plaintext HTTP7.5 High
- pgadmin 4, pgadmin.org pgadmin 4 +1 morepgAdmin 4: Connection-string injection via the database field in the Restore and Maintenance tools7.1 High
- Show moreLoading…