CWE-522

Unprotected Storage of Credentials vulnerability in McAfee Data Loss Prevention (DLP) for Mac prior to 11.5.2 allows loc

Unprotected Storage of Credentials vulnerability in McAfee Data Loss Prevention (DLP) for Mac prior to 11.5.2 allows loc

Cleartext Storage of Sensitive Information in Memory vulnerability in Microsoft Windows client in McAfee True Key (TK) p

GitLab Enterprise Edition (EE) 9.0 and later through 12.5 allows Information Disclosure.

In Sonatype Nexus Repository 3.26.1, an S3 secret key can be exposed by an admin user.

A vulnerability in the web UI of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker to

BIOTRONIK CardioMessenger II, The affected products use individual per-device credentials that are stored in a recoverab

The IBM QRadar Advisor 1.1 through 2.5.2 with Watson App for IBM QRadar SIEM does not adequately mask all passwords duri

Insufficiently protected credentialsin subsystem in some Intel(R) Client SSDs and some Intel(R) Data Center SSDs may all

Under certain conditions SAP Business One (Backup service), versions 9.3, 10.0, allows an attacker with admin permission

IBM Security Guardium Insights 2.0.1 stores user credentials in plain in clear text which can be read by a local user. I

IBM Security Guardium Data Encryption (GDE) 3.0.0.2 stores user credentials in plain in clear text which can be read by

Insufficient protection of the server-side encryption keys in Nextcloud Server 19.0.1 allowed an attacker to replace the

Jenkins Redgate SQL Change Automation Plugin 2.0.4 and earlier stored an API key unencrypted in job config.xml files on

Jenkins Fortify Plugin 19.1.29 and earlier stores proxy server passwords unencrypted in job config.xml files on the Jenk

Jenkins Dynamic Extended Choice Parameter Plugin 1.0.1 and earlier stores a password unencrypted in job config.xml files

Jenkins Debian Package Builder Plugin 1.6.11 and earlier stores a GPG passphrase unencrypted in its global configuration

Jenkins DigitalOcean Plugin 1.1 and earlier stores a token unencrypted in the global config.xml file on the Jenkins mast

Jenkins BMC Release Package and Deployment Plugin 1.1 and earlier stores credentials unencrypted in its global configura

Jenkins ECX Copy Data Management Plugin 1.9 and earlier stores a password unencrypted in job config.xml files on the Jen

Jenkins Credentials Binding Plugin 1.22 and earlier does not mask (i.e., replace with asterisks) secrets containing a `$

Jenkins Slack Upload Plugin 1.7 and earlier stores a secret unencrypted in job config.xml files on the Jenkins master wh

Jenkins TestComplete support Plugin 2.4.1 and earlier stores a password unencrypted in job config.xml files on the Jenki

Jenkins GitHub Coverage Reporter Plugin 1.8 and earlier stores secrets unencrypted in its global configuration file on t

Jenkins White Source Plugin 19.1.1 and earlier stores credentials unencrypted in its global configuration file and in jo

An issue was discovered in certain configurations of GNOME gnome-shell through 3.36.4. When logging out of an account, t

A vulnerability in the web-based management interface of Cisco AsyncOS software for Cisco Email Security Appliance (ESA)

A cross-site scripting inclusion (XSSI) vulnerability was reported in the legacy IBM BladeCenter Advanced Management Mod

Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host cont

Jenkins HP ALM Quality Center Plugin 1.6 and earlier stores a password unencrypted in its global configuration file on t

Jenkins couchdb-statistics Plugin 0.3 and earlier stores its server password unencrypted in its global configuration fil

Jenkins SMS Notification Plugin 1.2 and earlier stores an access token unencrypted in its global configuration file on t

On Supermicro H11, H12, M11, X9, X10, and X11 products, a combination of encryption and authentication problems in the v

A security feature bypass vulnerability exists where a NETLOGON message is able to obtain the session key and sign messa

TeamPass version 2.1.27 and earlier contains a Storing Passwords in a Recoverable Format vulnerability in Shared passwor

IBM Rational ClearCase 1.0.0.0 GIT connector does not sufficiently protect the document database password. An attacker c

An issue was discovered in portier vision 4.4.4.2 and 4.4.4.6. Passwords are stored using reversible encryption rather t

A vulnerability was found in Portainer before 1.20.0. Portainer stores LDAP credentials, corresponding to a master passw

Platform dependent weakness. This issue only impacts iSeries platforms. On these platforms, in BIG-IP (LTM, AAM, AFM, An

CloudBees Jenkins Operations Center 2.150.2.3, when an expired trial license exists, allows Cleartext Password Storage a

In Gradle Enterprise before 2018.5.3, Build Cache Nodes did not store the credentials at rest in an encrypted format.

LemonLDAP::NG -2.0.3 has Incorrect Access Control.

An issue was discovered in AUO Solar Data Recorder before 1.3.0. The web portal uses HTTP Basic Authentication and provi

A security regression of CVE-2019-9636 was discovered in python since commit d537ab0ff9767ef024f26246899728f0116b1ec3 af

Fuji Electric V-Server before 6.0.33.0 stores database credentials in project files as plaintext. An attacker that can g

Nortek Linear eMerge 50P/5000P devices have Default Credentials.

Linear eMerge E3-Series devices have Cleartext Credentials in a Database.

In several JetBrains IntelliJ IDEA versions, creating remote run configurations of JavaEE application servers leads to s

In several versions of JetBrains IntelliJ IDEA Ultimate, creating Task Servers configurations leads to saving a cleartex

Dynacolor FCM-MB40 v1.2.0.0 use /etc/appWeb/appweb.pass to store administrative web-interface credentials in cleartext.