CWE-522— Insufficiently Protected Credentials

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.— MITRE CWE catalog

1,780 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →

CVEs classified under CWE-522page 17 of 36

CVE-2020-11557HIGHCVSS 7.5EG 7.5
2020-04-09
An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. It includes the username and password values in cleartext within each request's cookie value.
CVE-2020-11555HIGHCVSS 7.5EG 7.5
2020-04-09
An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. It allows remote attackers to obtain sensitive credential information from backup files.
CVE-2016-11029HIGHCVSS 7.5EG 7.5
2020-04-07
An issue was discovered on Samsung mobile devices with L(5.0/5.1), M(6.0), and N(7.0) software. Attackers can read the password of the Mobile Hotspot in the log because of an unprotected intent. The Samsung ID is SVE-2016-7301 (December 20…
CVE-2019-3942HIGHCVSS 7.5EG 7.5
2020-04-01
Advantech WebAccess 8.3.4 does not properly restrict an RPC call that allows unauthenticated, remote users to read files. An attacker can use this vulnerability to recover the administrator password.
CVE-2020-11449HIGHCVSS 7.5EG 7.5
2020-04-01
An issue was discovered on Technicolor TC7337 8.89.17 devices. An attacker can discover admin credentials in the backup file, aka backupsettings.conf.
CVE-2020-2165HIGHCVSS 7.5EG 7.5
2020-03-25
Jenkins Artifactory Plugin 3.6.0 and earlier transmits configured passwords in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure.
CVE-2020-9425HIGHCVSS 7.5EG 7.5
2020-03-20
An issue was discovered in includes/head.inc.php in rConfig before 3.9.4. An unauthenticated attacker can retrieve saved cleartext credentials via a GET request to settings.php. Because the application was not exiting after a redirect is a…
CVE-2019-18785HIGHCVSS 7.5EG 7.5
2020-03-20
SuiteCRM 7.10.x prior to 7.10.21 and 7.11.x prior to 7.11.9 mishandles API access tokens and credentials.
CVE-2019-16067HIGHCVSS 7.5EG 7.5
2020-03-19
NETSAS Enigma NMS 65.0.0 and prior utilises basic authentication over HTTP for enforcing access control to the web application. The use of weak authentication transmitted over cleartext protocols can allow an attacker to steal username and…
CVE-2019-15656HIGHCVSS 7.5EG 7.5
2020-03-19
D-Link DSL-2875AL and DSL-2877AL devices through 1.00.05 are prone to information disclosure via a simple crafted request to index.asp on the web management server because of username_v and password_v variables.
CVE-2019-15655HIGHCVSS 7.5EG 7.5
2020-03-19
D-Link DSL-2875AL devices through 1.00.05 are prone to password disclosure via a simple crafted /romfile.cfg request to the web management server. This request doesn't require any authentication and will lead to saving the configuration fi…
CVE-2019-15654HIGHCVSS 7.5EG 7.5
2020-03-19
Comba AC2400 devices are prone to password disclosure via a simple crafted /09/business/upgrade/upcfgAction.php?download=true request to the web management server. The request doesn't require any authentication and will lead to saving the …
CVE-2019-15653HIGHCVSS 7.5EG 7.5
2020-03-19
Comba AP2600-I devices through A02,0202N00PD2 are prone to password disclosure via an insecure authentication mechanism. The HTML source code of the login page contains values that allow obtaining the username and password. The username ar…
CVE-2019-10682HIGHCVSS 7.5EG 7.5
2020-03-18
django-nopassword before 5.0.0 stores cleartext secrets in the database.
CVE-2020-9324HIGHCVSS 7.5EG 7.5
2020-03-18
Aquaforest TIFF Server 4.0 allows Unauthenticated SMB Hash Capture via UNC.
CVE-2019-9104HIGHCVSS 7.5EG 7.5
2020-03-11
An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. The application's configuration file contains parameters that repre…
CVE-2019-10705HIGHCVSS 7.5EG 7.5
2020-03-10
Western Digital SanDisk X600 devices in certain configurations, a vulnerability in the access control mechanism of the drive may allow data to be decrypted without knowledge of proper authentication credentials.
CVE-2020-9476HIGHCVSS 7.5EG 7.5
2020-03-04
ARRIS TG1692A devices allow remote attackers to discover the administrator login name and password by reading the /login page and performing base64 decoding.
CVE-2020-2114HIGHCVSS 7.5EG 7.5
2020-02-12
Jenkins S3 publisher Plugin 0.11.4 and earlier transmits configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure.
CVE-2013-2672HIGHCVSS 7.5EG 7.5
2020-02-03
Brother MFC-9970CDW devices with firmware 0D allow cleartext submission of passwords.
CVE-2020-7909HIGHCVSS 7.5EG 7.5
2020-01-30
In JetBrains TeamCity before 2019.1.5, some server-stored passwords could be shown via the web UI.
CVE-2014-2581HIGHCVSS 7.5EG 7.5
2020-01-28
Smb4K before 1.1.1 allows remote attackers to obtain credentials via vectors related to the cuid option in the "Additional options" line edit.
CVE-2019-19823HIGHCVSS 7.5EG 7.5
2020-01-27
A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) stores cleartext administrative passwords in flash memory and in a file. This affects TOTOLINK A3002RU through 2.0.0, A702R through 2.1.3, N3…
CVE-2012-6663HIGHCVSS 7.5EG 7.5
2020-01-23
General Electric D20ME devices are not properly configured and reveal plaintext passwords.
CVE-2019-19898HIGHCVSS 7.5EG 7.5
2020-01-23
In IXP EasyInstall 6.2.13723, there are cleartext credentials in network communication on TCP port 20050 when using the Administrator console remotely.
CVE-2019-12423HIGHCVSS 7.5EG 7.5
2020-01-16
Apache CXF ships with a OpenId Connect JWK Keys service, which allows a client to obtain the public keys in JWK format, which can then be used to verify the signature of tokens issued by the service. Typically, the service obtains the publ…
CVE-2012-3823HIGHCVSS 7.5EG 7.5
2020-01-10
Arial Campaign Enterprise before 11.0.551 stores passwords in clear text and these may be retrieved.
CVE-2019-5990HIGHCVSS 7.5EG 7.5
2020-01-06
Access analysis CGI An-Analyzer released in 2019 June 24 and earlier allow remote attackers to obtain a login password via HTTP referer.
CVE-2013-3620HIGHCVSS 7.5EG 7.5
2020-01-02
Hardcoded WSMan credentials in Intelligent Platform Management Interface (IPMI) with firmware for Supermicro X9 generation motherboards before 3.15 (SMT_X9_315) and firmware for Supermicro X8 generation motherboards before SMT X8 312.
CVE-2019-20047HIGHCVSS 7.5EG 7.5
2019-12-27
An issue was discovered on Alcatel-Lucent OmniVista 4760 devices, and 8770 devices before 4.1.2. An incorrect web server configuration allows a remote unauthenticated attacker to retrieve the content of its own session files. Every session…
CVE-2019-19890HIGHCVSS 7.5EG 7.5
2019-12-18
An issue was discovered on Humax Wireless Voice Gateway HGB10R-2 20160817_1855 devices. Admin credentials are sent over cleartext HTTP.
CVE-2013-2106HIGHCVSS 7.5EG 7.5
2019-12-03
webauth before 4.6.1 has authentication credential disclosure
CVE-2013-3313HIGHCVSS 7.5EG 7.5
2019-11-21
The Loftek Nexus 543 IP Camera stores passwords in cleartext, which allows remote attackers to obtain sensitive information via an HTTP GET request to check_users.cgi. NOTE: cleartext passwords can also be obtained from proc/kcore when lev…
CVE-2019-15801HIGHCVSS 7.5EG 7.5
2019-11-14
An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. The firmware image contains encrypted passwords that are used to authenticate users wishing to access a diagnostics or password-recovery menu. Using the h…
CVE-2019-10960HIGHCVSS 7.5EG 7.5
2019-08-20
Zebra Industrial Printers All Versions, Zebra printers are shipped with unrestricted end-user access to front panel options. If the option to use a passcode to limit the functionality of the front panel is applied, specially crafted packet…
CVE-2019-1020009HIGHCVSS 7.5EG 7.5
2019-07-29
Fleet before 2.1.2 allows exposure of SMTP credentials.
CVE-2019-8932HIGHCVSS 7.5EG 7.5
2019-07-17
Redbrick Shift through 3.4.3 allows an attacker to extract authentication tokens of services (such as Gmail, Outlook, etc.) used in the application.
CVE-2019-13179HIGHCVSS 7.5EG 7.5
2019-07-02
Calamares versions 3.1 through 3.2.10 copies a LUKS encryption keyfile from /crypto_keyfile.bin (mode 0600 owned by root) to /boot within a globally readable initramfs image with insecure permissions, which allows this originally protected…
CVE-2019-12452HIGHCVSS 7.5EG 7.5
2019-05-29
types/types.go in Containous Traefik 1.7.x through 1.7.11, when the --api flag is used and the API is publicly reachable and exposed without sufficient access control (which is contrary to the API documentation), allows remote authenticate…
CVE-2019-10921HIGHCVSS 7.5EG 7.5
2019-05-14
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Unencrypted storage of passwords in the project could allow an attacker with access to port 10005/tcp to obtain passwords of the device. The s…
CVE-2018-13789HIGHCVSS 7.5EG 7.5
2018-10-10
An issue was discovered in Descor Infocad FM before 3.1.0.0. An unauthenticated web service allows the retrieval of files on the web server and on reachable SMB servers.
CVE-2018-18074HIGHCVSS 7.5EG 7.5
2018-10-09
The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by sniffing the netwo…
CVE-2018-13822HIGHCVSS 7.5EG 7.5
2018-08-30
Unprotected storage of credentials in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows attackers to access sensitive information.
CVE-2017-13998HIGHCVSS 7.5EG 7.5
2017-10-05
An Insufficiently Protected Credentials issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The application does not sufficiently protect sensitive information from unauthorized access.
CVE-2017-6046HIGHCVSS 7.5EG 7.5
2017-06-30
An Insufficiently Protected Credentials issue was discovered in Sierra Wireless AirLink Raven XE, all versions prior to 4.0.14, and AirLink Raven XT, all versions prior to 4.0.11. Sensitive information is insufficiently protected during tr…
CVE-2017-7524HIGHCVSS 7.5EG 7.5
2017-06-27
tpm2-tools versions before 1.1.1 are vulnerable to a password leak due to transmitting password in plaintext from client to server when generating HMAC.
CVE-2017-3214HIGHCVSS 7.5EG 7.5
2017-06-20
The Milwaukee ONE-KEY Android mobile application stores the master token in plaintext in the apk binary.
CVE-2017-9557HIGHCVSS 7.5EG 7.5
2017-06-12
register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 allows remote attackers to discover passwords by sending the username parameter in conjunction with an empty password parameter, and reading the HTML source code of the resp…
CVE-2017-9136HIGHCVSS 7.5EG 7.5
2017-05-21
An issue was discovered on Mimosa Client Radios before 2.2.3. In the device's web interface, there is a page that allows an attacker to use an unsanitized GET parameter to download files from the device as the root user. The attacker can d…
CVE-2017-7486HIGHCVSS 7.5EG 7.5
2017-05-12
PostgreSQL versions 8.4 - 9.6 are vulnerable to information leak in pg_user_mappings view which discloses foreign server passwords to any user having USAGE privilege on the associated foreign server.

Map vulnerabilities like CWE-522 to your infrastructure

EchelonGraph correlates every CVE — across CWE-522 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.

Book a Demo →