CWE-549: Missing Password Field Masking
The product does not mask passwords during entry, increasing the potential for attackers to observe and capture passwords.
A kind of CWE-522 Insufficiently Protected Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- hitachi infrastructure analytics advisor, ops center analyzer, ops center analyzer viewpoint +2 more Missing Password Masking in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer and Hitachi Ops Center Analyzer viewpoint 4.6 Medium
- ysoft safeq 6 Insecure Password Storage in Y Soft SafeQ 6 5.1 Medium
- sap se application server abap Information Disclosure vulnerability in Application Server ABAP 6.5 Medium
- trifectatechfoundation sudo-rs sudo-rs: Partial password reveal is possible after timeout 3.8 Low
- suse neuvector NeuVector process with sensitive arguments lead to leakage 5.3 Medium
- digitro ngc explorer Dígitro NGC Explorer Configuration missing password field masking 5.3 Medium
- jenkins asakusasatellite, jenkins project asakusasatellite plugin +1 more Jenkins AsakusaSatellite Plugin Does not Mask API Keys via Job Configuration Form 5.5 Medium
- jenkins asakusasatellite, jenkins project asakusasatellite plugin +1 more Jenkins AsakusaSatellite Plugin Stores API Keys Unencrypted in Job `config.xml` Files 5.5 Medium
- jenkins zoho qengine, jenkins project zoho qengine plugin +1 more Jenkins Zoho QEngine Plugin Displays Unmasked API Keys 3.1 Low
- zoom communications, inc jenkins marketplace plugin Zoom Jenkins Marketplace plugin - Missing Password Field Masking 2.6 Low
- topdata inner rep plus webserver, inner rep plus +1 more Topdata Inner Rep Plus WebServer Operator Details Form InnerRepPlus.html missing password field masking 5.1 Medium
- hitachi device manager Missing Password Field Masking Vulnerability in Hitachi Device Manager 4.6 Medium
- mitsubishi electric corporation ethernet/ip configuration tool for fx5-enet/ip sw1dnn-eipctfx5-bd, ethernet/ip configuration tool for rj71eip91 sw1dnn-eipct-bd, mitsubishielectric fx5-enet\/ip firmware +3 more +5 more Information Disclosure vulnerability in EtherNet/IP Configuration tools 6.2 Medium
- canon ij network tool, canon inc. ij nw tool +1 more Canon IJ Network Tool/Ver.4.7.5 and earlier (supported OS: OS X 10.9.5-macOS 13),IJ Network Tool... 6.5 Medium
- jenkins s3 explorer, jenkins project s3 explorer plugin +1 more AWS secrets displayed without masking by Jenkins S3 Explorer Plugin 5.3 Medium
- jenkins bigpanda notifier, jenkins project bigpanda notifier plugin +1 more Jenkins BigPanda Notifier Plugin Missing Password Field Masking 5.3 Medium
- cisco identity services engine, identity services engine software +1 more Cisco Identity Services Engine Sensitive Information Disclosure Vulnerability 4.9 Medium
- devolutions remote desktop manager A lack of password masking in Devolutions Remote Desktop Manager allows physically proximate... 4.6 Medium
- dell powerscale onefs, emc powerscale onefs +1 more Dell PowerScale OneFS, versions 8.2.2 and above, contain a password disclosure vulnerability. An... 6.7 Medium