CWE-522

IBM Spectrum Protect Plus 10.1.2 may display the vSnap CIFS password in the IBM Spectrum Protect Plus Joblog. This can r

The Logitech R500 presentation clicker allows attackers to determine the AES key, leading to keystroke injection. On Win

Jenkins Credentials Binding Plugin Jenkins 1.17 is affected by: CWE-257: Storing Passwords in a Recoverable Format. The

Jenkins Skytap Cloud CI Plugin 2.06 and earlier stored credentials unencrypted in job config.xml files on the Jenkins ma

Jenkins Google Cloud Messaging Notification Plugin 1.0 and earlier stores credentials unencrypted in its global configur

Jenkins eggPlant Plugin 2.2 and earlier stores credentials unencrypted in job config.xml files on the Jenkins master whe

Dell EMC PowerConnect 8024, 7000, M6348, M6220, M8024 and M8024-K running firmware versions prior to 5.1.15.2 contain a

Clear text credentials are used to access managers app in Tomcat in Micro Focus Service Manager product versions 9.30, 9

Clear text password in browser in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40,

Jenkins Data Theorem: CI/CD Plugin 1.3 and earlier stored credentials unencrypted in job config.xml files on the Jenkins

Jenkins Git Changelog Plugin 2.17 and earlier stored credentials unencrypted in job config.xml files on the Jenkins mast

Jenkins Violation Comments to GitLab Plugin 2.28 and earlier stored credentials unencrypted in its global configuration

Jenkins Violation Comments to GitLab Plugin 2.28 and earlier stored credentials unencrypted in job config.xml files on t

Jenkins Call Remote Job Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they c

Jenkins Google Calendar Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they c

Tracker PDF-XChange Editor before 8.0.330.0 has an NTLM SSO hash theft vulnerability using crafted FDF or XFDF files (a

The Infinite Design application 3.4.12 for Android sends a username and password via TCP without any encryption during l

Jenkins Mattermost Notification Plugin 2.7.0 and earlier stored webhook URLs containing a secret token unencrypted in it

Jenkins Sonar Gerrit Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can

Tautulli versions 2.1.38 and below allows remote attackers to bypass intended access control in Plex Media Server becaus

Jenkins Anchore Container Image Scanner Plugin 1.0.19 and earlier stores credentials unencrypted in job config.xml files

ansible-playbook -k and ansible cli tools, all versions 2.8.x before 2.8.4, all 2.7.x before 2.7.13 and all 2.6.x before

An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL

Jenkins Rundeck Plugin 3.6.5 and earlier stores credentials unencrypted in its global configuration file and in job conf

Jenkins Redgate SQL Change Automation Plugin 2.0.3 and earlier stores credentials unencrypted in job config.xml files on

Rakuma App for Android version 7.15.0 and earlier, and for iOS version 7.16.4 and earlier allows an attacker to bypass a

CF CLI version prior to v6.45.0 (bosh release version 1.16.0) writes the client id and secret to its config file when th

IBM Tivoli Storage Productivity Center 5.2.13 through 5.3.0.1 could allow a remote attacker to obtain sensitive informat

The containers/image library used by the container tools Podman, Buildah, and Skopeo in Red Hat Enterprise Linux version

An Unprotected Storage of Credentials vulnerability in the identity and access management certificate generation procedu

Information exposure through process environment vulnerability in Synology Calendar before 2.3.3-0620 allows local users

A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All Versions < V5.2.4),

IBM MQ Advanced Cloud Pak (IBM Cloud Private 1.0.0 through 3.0.1) stores user credentials in plain in clear text which c

Jenkins Configuration as Code Plugin 1.20 and earlier did not treat the proxy password as a secret to be masked when log

Jenkins Maven Release Plugin 0.14.0 and earlier stored credentials unencrypted on the Jenkins master where they could be

Jenkins Beaker Builder Plugin 1.9 and earlier stored credentials unencrypted in its global configuration file on the Jen

Jenkins vFabric Application Director Plugin stores credentials unencrypted in its global configuration file on the Jenki

Jenkins Assembla Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they

Jenkins CodeScan Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they

Jenkins elOyente Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they

Jenkins Gem Publisher Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where

Jenkins GitLab Logo Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where t

IBM Security Guardium Big Data Intelligence (SonarG) 4.0 stores user credentials in plain in clear text which can be rea

CloudForms stores user passwords in recoverable format

MySQL-GUI-tools (mysql-administrator) leaks passwords into process list after with launch of mysql text console

Jenkins Spira Importer Plugin 3.2.2 and earlier stores credentials unencrypted in its global configuration file on the J

Claws Mail vCalendar plugin: credentials exposed on interface

rubygem-hammer_cli_foreman: File /etc/hammer/cli.modules.d/foreman.yml world readable

Jenkins Weibo Plugin 1.0.1 and earlier stores credentials unencrypted in its global configuration file on the Jenkins ma

IBM Watson Studio Local 1.2.3 stores key files in the user's home directory which could be obtained by another local use