cve.bz

CWE-522: Insufficiently Protected Credentials, page 11

Filter

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

What the weakness is: CWE-522 at MITRE. OWASP Top 10: A06:2025 Insecure Design

Related attack patterns (CAPEC): 13
  • CAPEC-50 Password Recovery Exploitation Likelihood: Medium · Severity: High
  • CAPEC-102 Session Sidejacking Likelihood: High · Severity: High
  • CAPEC-474 Signature Spoofing by Key Theft Likelihood: Medium · Severity: High
  • CAPEC-509 Kerberoasting Severity: High
  • CAPEC-551 Modify Existing Service
  • CAPEC-555 Remote Services with Stolen Credentials Severity: Very High
  • CAPEC-560 Use of Known Domain Credentials Likelihood: High · Severity: High
  • CAPEC-561 Windows Admin Shares with Stolen Credentials
  • CAPEC-600 Credential Stuffing Likelihood: High · Severity: High
  • CAPEC-644 Use of Captured Hashes (Pass The Hash) Likelihood: Medium · Severity: High
  • CAPEC-645 Use of Captured Tickets (Pass The Ticket) Likelihood: Low · Severity: High
  • CAPEC-652 Use of Known Kerberos Credentials Likelihood: Medium · Severity: High
  • CAPEC-653 Use of Known Operating System Credentials Likelihood: High · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-522, as MITRE names them. Credits.

Ask an AI about CWE-522

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-522: Insufficiently Protected Credentials and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/522.html and https://cve.bz/cve/cwe/522?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 5.5CVE-2024-20462EPSS 0.2%

    A vulnerability in the web-based management interface of Cisco ATA 190 Series Multiplatform Analog Telephone Adapter firmware could allow an authenticated, local attacker with low privileges to view passwords on an affected device. This…

  2. 6.5CVE-2024-47161EPSS 0.3%

    In JetBrains TeamCity before 2024.07.3 password could be exposed via Sonar runner REST API

  3. 7.5CVE-2024-47805EPSS 0.6%

    Jenkins Credentials Plugin 1380.va_435002fa_924 and earlier, except 1371.1373.v4eb_fa_b_7161e9, does not redact encrypted values of credentials using the `SecretBytes` type when accessing item `config.xml` via REST API or CLI.

  4. 6.8CVE-2024-37187EPSS 0.4%

    Advantech ADAM-5550 share user credentials with a low level of encryption, consisting of base 64 encoding.

  5. 6.9CVE-2024-34542EPSS 0.2%

    Advantech ADAM-5630 shares user credentials plain text between the device and the user source device during the login process.

  6. 4.3CVE-2024-45744EPSS 0.2%

    TopQuadrant TopBraid EDG stores external credentials insecurely. An authenticated attacker with file system access can read edg-setup.properites and obtain the secret to decrypt external passwords stored in edg-vault.properties. An authent…

  7. 4.3CVE-2024-31899EPSS 0.2%

    IBM Cognos Command Center 10.2.4.1 and 10.2.5 could disclose highly sensitive user information to an authenticated user with physical access to the device.

  8. 6.5CVE-2024-9014ExploitEPSS 9.7%

    pgAdmin versions 8.11 and earlier are vulnerable to a security flaw in OAuth2 authentication. This vulnerability allows an attacker to potentially obtain the client ID and secret, leading to unauthorized access to user data.

  9. 5.5CVE-2024-40703EPSS 0.1%

    IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, 12.0.2, 12.0.3, and IBM Cognos Analytics Reports for iOS 11.0.0.7 could allow a local attacker to obtain sensitive information in the form of an API key. An atta…

  10. 5.3CVE-2024-47162EPSS 0.4%

    In JetBrains YouTrack before 2024.3.44799 token could be revealed on Imports page

  11. 9.1CVE-2024-8986EPSS 0.5%

    The grafana plugin SDK bundles build metadata into the binaries it compiles; this metadata includes the repository URI for the plugin being built, as retrieved by running `git remote get-url origin`. If credentials are included in the re…

  12. 7.5CVE-2024-8777EPSS 0.5%

    OMFLOW from The SYSCOM Group has an information leakage vulnerability, allowing unauthorized remote attackers to read arbitrary system configurations. If LDAP authentication is enabled, attackers can obtain plaintext credentials.

  13. 8.1CVE-2024-31415EPSS 0.1%

    The Eaton Foreseer software provides the feasibility for the user to configure external servers for multiple purposes such as network management, user management, etc. The software uses encryption to store these configurations securely on …

  14. 8.5CVE-2024-28981EPSS 0.3%

    Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.1.0.0 and 9.3.0.8, including 8.3.x, discloses database passwords when searching metadata injectable fields.

  15. 5.5CVE-2024-20489EPSS 0.1%

    A vulnerability in the storage method of the PON Controller configuration file could allow an authenticated, local attacker with low privileges to obtain the MongoDB credentials. This vulnerability is due to improper storage of the unen…

  16. 4.6CVE-2024-44815EPSS 0.6%

    Vulnerability in Hathway Skyworth Router CM5100 v.4.1.1.24 allows a physically proximate attacker to obtain user credentials via SPI flash Firmware W25Q64JV.

  17. 8.8CVE-2024-40710EPSS 1.1%

    A series of related high-severity vulnerabilities, the most notable enabling remote code execution (RCE) as the service account and extraction of sensitive information (savedcredentials and passwords). Exploiting these vulnerabilities requ…

  18. 4.1CVE-2024-39278EPSS 0.2%

    Credentials to access device configuration information stored unencrypted in flash memory. These credentials would allow read-only access to network configuration information and terminal configuration data.

  19. 8.8CVE-2023-49233EPSS 0.4%

    Insufficient access checks in Visual Planning Admin Center 8 before v.1 Build 240207 allow attackers in possession of a non-administrative Visual Planning account to utilize functions normally reserved for administrators. The affected func…

  20. 4.9CVE-2024-40704EPSS 0.6%

    IBM InfoSphere Information Server 11.7 could allow a privileged user to obtain sensitive information from authentication request headers. IBM X-Force ID: 298277.

  21. 6.8CVE-2024-31800EPSS 0.4%

    Authentication Bypass in GNCC's GC2 Indoor Security Camera 1080P allows an attacker with physical access to gain a privileged command shell via the UART Debugging Port.

  22. 6.9CVE-2024-7813EPSS 0.8%

    A vulnerability, which was classified as problematic, has been found in SourceCodester Prison Management System 1.0. This issue affects some unknown processing of the file /uploadImage/Profile/ of the component Profile Image Handler. The m…

  23. 6.5CVE-2024-39818EPSS 0.6%

    Protection mechanism failure for some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct information disclosure via network access.

  24. 8.1CVE-2024-36460EPSS 0.6%

    The front-end audit log allows viewing of unprotected plaintext passwords, where the passwords are displayed in plain text.

  25. 9.3CVE-2024-6118EPSS 0.5%

    A Plaintext Storage of a Password vulnerability in ebooknote function in Hamastar MeetingHub Paperless Meetings 2021 allows remote attackers to obtain the other users’ credentials and gain access to the product via an XML file.

  26. 7.5CVE-2024-7389EPSS 0.7%

    The Forminator plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.29.1 via class-forminator-addon-hubspot-wp-api.php. This makes it possible for unauthenticated attackers to extract…

  27. 4.6CVE-2024-3082EPSS 0.1%

    A “CWE-256: Plaintext Storage of a Password” affecting the administrative account allows an attacker with physical access to the machine to retrieve the password in cleartext unless specific security measures at other layers (e.g., full-di…

  28. 7.4CVE-2024-6492EPSS 0.6%

    Exposure of Sensitive Information in edge browser session proxy feature in Devolutions Remote Desktop Manager 2024.2.14.0 and earlier on Windows allows an attacker to intercept proxy credentials via a specially crafted website.

  29. 5.5CVE-2024-39733EPSS 0.1%

    IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 295972.

  30. 7.5CVE-2024-38453EPSS 0.4%

    The Avalara for Salesforce CPQ app before 7.0 for Salesforce allows attackers to read an API key. NOTE: the current version is 11 as of mid-2024.

  31. 8.8CVE-2023-41926EPSS 0.3%

    The webserver utilizes basic authentication for its user login to the configuration interface. As encryption is disabled on port 80, it enables potential eavesdropping on user traffic, making it possible to intercept their credentials.

  32. 5.3CVE-2024-39879EPSS 0.3%

    In JetBrains TeamCity before 2024.03.3 application token could be exposed in EC2 Cloud Profile settings

  33. 5.3CVE-2024-39878EPSS 0.3%

    In JetBrains TeamCity before 2024.03.3 private key could be exposed via testing GitHub App Connection

  34. 7.5CVE-2024-38505EPSS 0.4%

    In JetBrains YouTrack before 2024.2.34646 user access token was sent to the third-party site

  35. 3.7CVE-2024-30119EPSS 0.2%

    HCL DRYiCE Optibot Reset Station is impacted by a missing Strict Transport Security Header.  This could allow an attacker to intercept or manipulate data during redirection.

  36. 7.0CVE-2024-38285EPSS 0.2%

    Logs storing credentials are insufficiently protected and can be decoded through the use of open source tools.

  37. 8.5CVE-2024-38282EPSS 0.2%

    Utilizing default credentials, an attacker is able to log into the camera's operating system which could allow changes to be made to the operations or shutdown the camera requiring a physical reboot of the system.

  38. 4.4CVE-2024-25052EPSS 0.2%

    IBM Jazz Reporting Service 7.0.3 stores user credentials in plain clear text which can be read by an admin user. IBM X-Force ID: 283363.

  39. 6.5CVE-2024-26330EPSS 0.6%

    An issue was discovered in Kape CyberGhostVPN 8.4.3.12823 on Windows. After a successful logout, user credentials remain in memory while the process is still open, and can be obtained by dumping the process memory and parsing it.

  40. 4.8CVE-2024-35208EPSS 0.1%

    A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The affected web server stored the password in cleartext. This could allow attacker in a privileged position to obtain access passwor…

  41. 7.5CVE-2024-37051EPSS 4.9%

    GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; Aqua 2024.1.2; CLion 2023.1.7, 2023.2.4, 2023.3.5, 2024.1.3,…

  42. 8.1CVE-2024-5657EPSS 0.8%

    The CraftCMS plugin Two-Factor Authentication in versions 3.3.1, 3.3.2 and 3.3.3 discloses the password hash of the currently authenticated user after submitting a valid TOTP.

  43. 7.5CVE-2024-36127EPSS 0.4%

    apko is an apk-based OCI image builder. apko exposures HTTP basic auth credentials from repository and keyring URLs in log output. This vulnerability is fixed in v0.14.5.

  44. 9.4CVE-2024-5176EPSS 0.5%

    Insufficiently Protected Credentials vulnerability in Baxter Welch Allyn Configuration Tool may allow Remote Services with Stolen Credentials.This issue affects Welch Allyn Configuration Tool: versions 1.9.4.1 and prior.

  45. 6.5CVE-2024-33849EPSS 0.4%

    ci solution CI-Out-of-Office Manager through 6.0.0.77 uses a Hard-coded Cryptographic Key.

  46. 5.5CVE-2024-35192EPSS 0.2%

    Trivy is a security scanner. Prior to 0.51.2, if a malicious actor is able to trigger Trivy to scan container images from a crafted malicious registry, it could result in the leakage of credentials for legitimate registries such as AWS Ela…

  47. 9.8CVE-2024-36081EPSS 0.6%

    Westermo EDW-100 devices through 2024-05-03 allow an unauthenticated user to download a configuration file containing a cleartext password. NOTE: this is a serial-to-Ethernet converter that should not be placed at the edge of the network.

  48. 6.7CVE-2024-23583EPSS 0.2%

    An attacker could potentially intercept credentials via the task manager and perform unauthorized access to the Client Deploy Tool on Windows systems.

  49. 7.6CVE-2024-27109EPSS 0.3%

    Insufficiently protected credentials in GE HealthCare EchoPAC products

  50. 4.8CVE-2024-33497EPSS 0.2%

    A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA10) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA20) (All ver…