The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
1,360 vulnerabilities with CWE-522
CVE-2019-19843
CRITICAL
Ruckus Wireless Unleashed <200.7.10.102.64 - Info Disclosure
CVSS 9.8
CVE-2019-19696
MEDIUM
Trend Micro Password Manager - Info Disclosure
CVSS 5.5
CVE-2019-12423
HIGH
Apache CXF < 3.2.12 - Insufficiently Protected Credentials via JWK Keystore Configuration
CVSS 7.5
CVE-2019-4508
HIGH
IBM QRadar SIEM <7.3.3 - Info Disclosure
CVSS 7.8
CVE-2019-6700
MEDIUM
FortiSIEM < 5.2.5 - Authenticated Information Exposure via External Authentication Profile Form
CVSS 6.5
CVE-2019-5990
HIGH
cgi_an-anlyzer < 2019-06-24 - Unauthenticated Login Password Exposure via HTTP Referer
CVSS 7.5
CVE-2019-19310
MEDIUM
GitLab 9.0.0-12.5.0 - Insufficiently Protected Credentials
CVSS 4.9
CVE-2019-10205
MEDIUM
Red Hat Quay - Insufficiently Protected Credentials via Plain Text Robot Account Tokens
CVSS 6.3
CVE-2019-4335
MEDIUM
IBM Watson Studio Local <1.2.3 - Info Disclosure
CVSS 5.5
CVE-2019-20047
HIGH
Alcatel-Lucent OmniVista 4760 and 8770 < 4.1.2 - Unauthenticated Credential Exposure via Session File Retrieval
CVSS 7.5
CVE-2019-6024
MEDIUM
Rakuma App for Android < 7.15.0 and iOS < 7.16.4 - Insufficiently Protected Credentials via Malicious Application
CVSS 6.5
CVE-2019-3431
CRITICAL
ZTE ZXCLOUD GoldenData VAP <= zxivs-vap-portal-xzgav4.01.01.02 - Credential Exposure via Unencrypted Transmission
CVSS 9.8
CVE-2019-18615
MEDIUM
CloudVision Portal <2018.2 - Info Disclosure
CVSS 4.9
CVE-2019-18572
CRITICAL
RSA Identity Governance and Lifecycle <7.1.1 P03 - Auth Bypass
CVSS 9.8
CVE-2019-19890
HIGH
Humax Wireless Voice Gateway HGB10R-2 20160817_1855 - Cleartext Transmission of Sensitive Information
CVSS 7.5
CVE-2019-16572
MEDIUM
Jenkins Weibo Plugin <1.0.1 - Info Disclosure
CVSS 5.5
CVE-2019-16557
MEDIUM
Jenkins Redgate SQL Change Automation Plugin <2.0.3 - Info Disclosure
CVSS 6.5
CVE-2019-16556
MEDIUM
Jenkins Rundeck Plugin <3.6.5 - Info Disclosure
CVSS 6.5
CVE-2019-19687
HIGH
OpenStack Keystone 15.0.0-16.0.0 - Info Disclosure
CVSS 8.8
CVE-2019-16673
MEDIUM
Weidmueller IE-SW-VL05M <3.6.6, IE-SW-VL08MT <3.5.2, IE-SW-PL10M <3...
CVSS 6.5
CVE-2019-16672
CRITICAL
Weidmueller IE-SW-VL05M <3.6.6 - Info Disclosure
CVSS 9.8
CVE-2019-10224
MEDIUM
389-ds-base <1.4.1.3 - Info Disclosure
CVSS 4.6
CVE-2019-10214
MEDIUM
Containers/image - Info Disclosure
CVSS 5.9
CVE-2019-10206
MEDIUM
Ansible <2.8.4, <2.7.13, <2.6.19 - Info Disclosure
CVSS 6.5
CVE-2019-16544
HIGH
Jenkins QMetry for JIRA - Test Mgmt Plugin <1.12 - Info Disclosure
CVSS 8.8
Details
Vulnerabilities
1,360