CWE-522

Insufficiently Protected Credentials

Parent: CWE-1390 - Weak Authentication

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

1,360 vulnerabilities with CWE-522
CVE-2019-19843 CRITICAL
Ruckus Wireless Unleashed <200.7.10.102.64 - Info Disclosure
CVSS 9.8
CVE-2019-19696 MEDIUM
Trend Micro Password Manager - Info Disclosure
CVSS 5.5
CVE-2019-12423 HIGH
Apache CXF < 3.2.12 - Insufficiently Protected Credentials via JWK Keystore Configuration
CVSS 7.5
CVE-2019-4508 HIGH
IBM QRadar SIEM <7.3.3 - Info Disclosure
CVSS 7.8
CVE-2019-6700 MEDIUM
FortiSIEM < 5.2.5 - Authenticated Information Exposure via External Authentication Profile Form
CVSS 6.5
CVE-2019-5990 HIGH
cgi_an-anlyzer < 2019-06-24 - Unauthenticated Login Password Exposure via HTTP Referer
CVSS 7.5
CVE-2019-19310 MEDIUM
GitLab 9.0.0-12.5.0 - Insufficiently Protected Credentials
CVSS 4.9
CVE-2019-10205 MEDIUM
Red Hat Quay - Insufficiently Protected Credentials via Plain Text Robot Account Tokens
CVSS 6.3
CVE-2019-4335 MEDIUM
IBM Watson Studio Local <1.2.3 - Info Disclosure
CVSS 5.5
CVE-2019-20047 HIGH
Alcatel-Lucent OmniVista 4760 and 8770 < 4.1.2 - Unauthenticated Credential Exposure via Session File Retrieval
CVSS 7.5
CVE-2019-6024 MEDIUM
Rakuma App for Android < 7.15.0 and iOS < 7.16.4 - Insufficiently Protected Credentials via Malicious Application
CVSS 6.5
CVE-2019-3431 CRITICAL
ZTE ZXCLOUD GoldenData VAP <= zxivs-vap-portal-xzgav4.01.01.02 - Credential Exposure via Unencrypted Transmission
CVSS 9.8
CVE-2019-18615 MEDIUM
CloudVision Portal <2018.2 - Info Disclosure
CVSS 4.9
CVE-2019-18572 CRITICAL
RSA Identity Governance and Lifecycle <7.1.1 P03 - Auth Bypass
CVSS 9.8
CVE-2019-19890 HIGH
Humax Wireless Voice Gateway HGB10R-2 20160817_1855 - Cleartext Transmission of Sensitive Information
CVSS 7.5
CVE-2019-16572 MEDIUM
Jenkins Weibo Plugin <1.0.1 - Info Disclosure
CVSS 5.5
CVE-2019-16557 MEDIUM
Jenkins Redgate SQL Change Automation Plugin <2.0.3 - Info Disclosure
CVSS 6.5
CVE-2019-16556 MEDIUM
Jenkins Rundeck Plugin <3.6.5 - Info Disclosure
CVSS 6.5
CVE-2019-19687 HIGH
OpenStack Keystone 15.0.0-16.0.0 - Info Disclosure
CVSS 8.8
CVE-2019-16673 MEDIUM
Weidmueller IE-SW-VL05M <3.6.6, IE-SW-VL08MT <3.5.2, IE-SW-PL10M <3...
CVSS 6.5
CVE-2019-16672 CRITICAL
Weidmueller IE-SW-VL05M <3.6.6 - Info Disclosure
CVSS 9.8
CVE-2019-10224 MEDIUM
389-ds-base <1.4.1.3 - Info Disclosure
CVSS 4.6
CVE-2019-10214 MEDIUM
Containers/image - Info Disclosure
CVSS 5.9
CVE-2019-10206 MEDIUM
Ansible <2.8.4, <2.7.13, <2.6.19 - Info Disclosure
CVSS 6.5
CVE-2019-16544 HIGH
Jenkins QMetry for JIRA - Test Mgmt Plugin <1.12 - Info Disclosure
CVSS 8.8
Details
Vulnerabilities 1,360