CWE-522

1,360 vulnerabilities with CWE-522

CVE-2020-4408 MEDIUM

IBM QRadar Advisor 1.1-2.5.2 - Insufficiently Protected Credentials via Password Masking

CVSS 4.6

CVE-2020-4372 HIGH

IBM Verify Gateway 1.0.0 and 1.0.1 - Insufficiently Protected Credentials

CVSS 7.8

CVE-2020-4095 MEDIUM

HCL BigFix Platform 9.2-9.2.18 - Insufficiently Protected Credentials in Memory

CVSS 6.0

CVE-2020-3180 HIGH

Cisco SD-WAN Solution Software - Unauthenticated Access

CVSS 7.8

CVE-2020-10287 CRITICAL

ABB IRC5 and IRB140 Firmware - Insufficiently Protected Credentials

CVSS 9.8

CVE-2020-2218 LOW

Jenkins HP ALM Quality Center Plugin <1.6 - Info Disclosure

CVSS 3.3

CVE-2020-2213 MEDIUM

Jenkins White Source Plugin <19.1.1 - Info Disclosure

CVSS 4.3

CVE-2020-2212 MEDIUM

Jenkins GitHub Coverage Reporter Plugin <1.8 - Info Disclosure

CVSS 4.3

CVE-2020-2209 MEDIUM

Jenkins TestComplete support Plugin <2.4.1 - Info Disclosure

CVSS 4.3

CVE-2020-2208 MEDIUM

Jenkins Slack Upload Plugin <1.7 - Info Disclosure

CVSS 4.3

CVE-2020-3391 MEDIUM

Cisco DNA Center < 1.2.10 Authenticated Sensitive Information Exposure via Cleartext Credential Storage

CVSS 6.5

CVE-2020-5899 HIGH

NGINX Controller 3.0.0-3.4.0 - Info Disclosure

CVSS 7.8

CVE-2020-10727 MEDIUM

ActiveMQ Artemis <2.12.0 - Info Disclosure

CVSS 5.5

CVE-2020-14930 HIGH

BT CTROMS Terminal OS Port Portal CT-464 - Info Disclosure

CVSS 8.1

CVE-2020-0540 HIGH

Intel AMT Firmware < 11.8.77, 11.12.77, 11.22.77, 12.0.64 - Unauthenticated Credential Disclosure via Network Access

CVSS 7.5

CVE-2020-10752 HIGH

OpenShift API Server - Info Disclosure

CVSS 7.5

CVE-2020-10755 MEDIUM

OpenStack Cinder <14.1.0-16.1.0 - Info Disclosure

CVSS 6.5

CVE-2020-6239 MEDIUM

SAP Business One <10.0 - Info Disclosure

CVSS 4.4

CVE-2020-11681 HIGH

Castel NextGen DVR v1.0.0 - Insufficiently Protected Credentials

CVSS 8.1

CVE-2020-7030 MEDIUM

Avaya IP Office 9.x, 10.0-10.1.0.7, 11.0-11.0.4.3 - Insufficiently Protected Credentials

CVSS 5.5

CVE-2020-2198 MEDIUM

Jenkins Project Inheritance Plugin <= 19.08.02 - Insufficiently Protected Credentials in getConfigAsXML API

CVSS 6.5

CVE-2020-10972 HIGH

Wavlink WN530HG4, WN531G3, and WN572HG3 Firmware - Unauthenticated Administrator Password Exposure via live_?.shtml Page

CVSS 7.5

CVE-2020-2182 MEDIUM

Jenkins Credentials Binding Plugin < 1.22 - Insufficiently Protected Credentials

CVSS 4.3

CVE-2020-2181 MEDIUM

Jenkins Credentials Binding Plugin < 1.22 - Insufficiently Protected Credentials in Build Log

CVSS 6.5

CVE-2020-11821 MEDIUM

Rukovoditel 2.5.2 - Insufficiently Protected Credentials via Cookie Storage

CVSS 5.3