CWE-522

Aquaverde GmbH Aquarius CMS prior to version 4.1.1 is affected by: Incorrect Access Control. The impact is: The access t

A cleartext password storage issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. The

The HTTP client in Gradle before 5.6 sends authentication credentials originally destined for the configured host. If th

A Credentials Management CWE-255 vulnerability exists in the APC UPS Network Management Card 2 AOS v6.5.6, which could c

ONTAP Select Deploy administration utility versions 2.2 through 2.12.1 transmit credentials in plaintext.

The root password of the Cobham EXPLORER 710 is the same for all versions of firmware up to and including v1.08. This co

ThinVNC 1.0b1 is vulnerable to arbitrary file read, which leads to a compromise of the VNC server. The vulnerability exi

The Customer's Tomedo Server in Version 1.7.3 communicates to the Vendor Tomedo Server via HTTP (in cleartext) that can

An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3

Aruba ClearPass Policy Manager before 6.5.7 and 6.6.x before 6.6.2 allows attackers to obtain database credentials.

Unprotected Storage of Credentials vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows local attac

An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL

The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain an Im

All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have encryption problems vulnerability. Attackers c

A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticat

Cloud Foundry Container Runtime, versions prior to 0.28.0, deploys K8s worker nodes that contains a configuration file w

An insufficiently protected credentials vulnerability exists in JenkinsAppDynamics Dashboard Plugin 1.0.14 and earlier i

In ovirt-engine 4.1, if a host was provisioned with cloud-init, the root password could be revealed through the REST int

Jenkins StarTeam Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be v

Jenkins Assembla Auth Plugin stores credentials unencrypted in the global config.xml configuration file on the Jenkins m

Jenkins Relution Enterprise Appstore Publisher Plugin stores credentials unencrypted in its global configuration file on

Jenkins Klaros-Testmanagement Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where

Jenkins mabl Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewe

Jenkins Diawi Upload Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can

Jenkins Minio Storage Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where

Jenkins DeployHub Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be

Jenkins youtrack-plugin Plugin 0.7.1 and older stored credentials unencrypted in its global configuration file on the Je

Jenkins Jabber Server Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where

Jenkins Netsparker Cloud Scan Plugin 1.1.5 and older stored credentials unencrypted in its global configuration file on

Jenkins Kmap Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewe

Jenkins crittercism-dsym Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they

Jenkins Serena SRA Deploy Plugin stores credentials unencrypted in its global configuration file on the Jenkins master w

Jenkins Sametime Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they

Jenkins Koji Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can

Jenkins CloudCoreo DeployTime Plugin stores credentials unencrypted in its global configuration file on the Jenkins mast

A plaintext password vulnerability in the Zyxel NAS 326 through 5.21 allows an elevated privileged user to get the admin

AVEVA Wonderware System Platform 2017 Update 2 and prior uses an ArchestrA network user account for authentication of sy

Jenkins jira-ext Plugin 0.8 and earlier stored credentials unencrypted in its global configuration file on the Jenkins m

Jenkins Azure PublisherSettings Credentials Plugin 1.2 and earlier stored credentials unencrypted in the credentials.xml

Jenkins Twitter Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they

Jenkins Aqua MicroScanner Plugin 1.0.5 and earlier stored credentials unencrypted in its global configuration file on th

Jenkins Azure AD Plugin 0.3.3 and earlier stored the client secret unencrypted in the global config.xml configuration fi

Jenkins InfluxDB Plugin 1.21 and earlier stored credentials unencrypted in its global configuration file on the Jenkins

An issue was discovered in Carel pCOWeb prior to B1.2.4. In /config/pw_changeusers.html the device stores cleartext pass

Kyocera Command Center RX TASKalfa4501i and TASKalfa5052ci allows remote attackers to abuse the Test button in the machi

Jenkins Mashup Portlets Plugin stored credentials unencrypted on the Jenkins master where they can be viewed by users wi

In Knowage through 6.1.1, an authenticated user who accesses the datasources page will gain access to any data source cr

Jenkins Extensive Testing Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they

Jenkins QMetry for JIRA - Test Management Plugin 1.12 and earlier stores credentials unencrypted in job config.xml files

OpenStack Keystone 15.0.0 and 16.0.0 is affected by Data Leakage in the list credentials API. Any user with a role on a