The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
1,363 vulnerabilities with CWE-522
CVE-2019-6242
HIGH
Kentico Xperience - Insufficiently Protected Credentials in SMTP Configuration
CVSS 7.2
CVE-2019-1000001
CRITICAL
TeamPass < 2.1.27.0 - Insufficiently Protected Credentials in Shared Password Vaults
CVSS 9.8
CVE-2019-7300
HIGH
Artica Proxy 3.06.200056 - Command Injection
CVSS 7.2
CVE-2018-16153
HIGH
Apereo Opencast 4.0-10.5 - Insufficiently Protected Credentials via External Service Authentication
CVSS 7.5
CVE-2018-20243
HIGH
Apache Fineract 1.0.0-1.2.9 - Credential Exposure via URL Parameters
CVSS 7.5
CVE-2018-21248
HIGH
Mattermost Server < 5.4.0 - Insufficiently Protected Credentials
CVSS 7.5
CVE-2018-21239
MEDIUM
Foxit Reader and PhantomPDF < 9.2 - NTLM Credential Theft via GoToE or GoToR Action
CVSS 5.3
CVE-2018-21237
MEDIUM
Foxit PhantomPDF < 8.3.7 - NTLM Credential Theft via GoToE or GoToR Action
CVSS 5.3
CVE-2018-21031
MEDIUM
Tautulli <= 2.1.38 - Insufficiently Protected Credentials via X-Plex-Token Mishandling
CVSS 6.5
CVE-2018-7820
CRITICAL
APC UPS Network Management Card 2 AOS <6.5.6 - Info Disclosure
CVSS 9.8
CVE-2018-19466
CRITICAL
Portainer <1.20.0 - Info Disclosure
CVSS 9.8
CVE-2018-17500
LOW
Envoy Passport - Insufficiently Protected OAuth Credentials
CVSS 2.9
CVE-2018-20781
HIGH
GNOME Keyring < 3.27.2 - Insufficiently Protected Credentials via Session-Child Process
CVSS 7.8
CVE-2018-15456
MEDIUM
Cisco Identity Services Engine - Authenticated Plaintext Password Exposure in Admin Portal
CVSS 4.3
CVE-2018-0474
HIGH
Cisco Unified Communications Manager - Authenticated Cleartext Credential Exposure in Web Management Interface
CVSS 8.8
CVE-2018-1000425
HIGH
Jenkins SonarQube Scanner Plugin <2.8 - Info Disclosure
CVSS 7.8
CVE-2018-1000424
HIGH
Jenkins Artifactory Plugin <2.16.1 - Info Disclosure
CVSS 7.8
CVE-2018-1000423
HIGH
Jenkins Crowd <2.0.0 - Info Disclosure
CVSS 7.8
CVE-2018-1000627
CRITICAL
Battelle V2I Hub 2.5.1 - Info Disclosure
CVSS 9.8
CVE-2018-11742
CRITICAL
NEC Univerge SV9100 WebPro 6.00.00 - Insufficiently Protected Credentials
CVSS 9.8
CVE-2018-20445
CRITICAL
D-Link DCM-604 and DCM-704 - Unauthenticated Wi-Fi Credential Exposure via SNMP
CVSS 9.8
CVE-2018-20444
CRITICAL
Technicolor CGA0111 CGA0111E-ES-13-E23E-c8000r5712-170217-0829-TRU - Wi-Fi Credential Exposure via SNMP
CVSS 9.8
CVE-2018-20443
CRITICAL
Technicolor TC7200.d1I - Unauthenticated Wi-Fi Credential Exposure via SNMP
CVSS 9.8
CVE-2018-20442
CRITICAL
Technicolor TC7110.B STC8.62.02 - Unauthenticated Wi-Fi Credential Exposure via SNMP OID Requests
CVSS 9.8
CVE-2018-20441
CRITICAL
Technicolor TC7200.TH2v2 SC05.00.22 - Unauthenticated Wi-Fi Credential Exposure via SNMP OID Requests
CVSS 9.8
Details
Vulnerabilities
1,363