# CWE-256.

Every Advisory and CVE whose sources give the weakness CWE-256, newest first.

## Records, newest first (an older page)

- [didi KnowSearch 1 credentials storage](https://agentprime.io/advisories/CVE-2023-4984.md)
  `CVE-2023-4984` · CVE record: didi KnowSearch · CVSS 4.3 Medium · Not analysed yet · Published 15 Sept 2023 · Tags: CWE-256
- [Plaintext password storage in Skyhigh Security Skyhigh Secure Web Gateway (SWG)](https://agentprime.io/advisories/CVE-2023-4400.md)
  `CVE-2023-4400` · CVE record: Skyhigh Security Skyhigh Secure Web Gateway (SWG) · CVSS 6.2 Medium · Not analysed yet · Published 13 Sept 2023 · Tags: CWE-256
- [Keycloak vulnerable to Plaintext Storage of User Password](https://agentprime.io/advisories/GHSA-5q66-v53q-pm35.md)
  `GHSA-5q66-v53q-pm35`, `CVE-2023-4918` · Maven `org.keycloak:keycloak-core`: affected `>=22.0.2, <22.0.3`, fixed in `22.0.3` · CVSS 8.8 High · Not analysed yet · Published 12 Sept 2023 · Tags: Weak cryptography or TLS, CWE-256
- [Softneta MedDream PACS Plaintext Storage of a Password](https://agentprime.io/advisories/CVE-2023-39227.md)
  `CVE-2023-39227` · CVE record: Softneta MedDream PACS · CVSS 6.1 Medium · Not analysed yet · Published 11 Sept 2023 · Tags: CWE-256
- [Plaintext Storage of a Password in Infodrom Sofwares E-Invoice Approval System](https://agentprime.io/advisories/CVE-2023-35067.md)
  `CVE-2023-35067` · CVE record: Infodrom Software E-Invoice Approval System · CVSS 7.5 High · Not analysed yet · Published 25 Jul 2023 · Tags: CWE-256
- [PiiGAB M-Bus Plaintext Storage of a Password](https://agentprime.io/advisories/CVE-2023-35765.md)
  `CVE-2023-35765` · CVE record: PiiGAB M-Bus SoftwarePack · CVSS 6.5 Medium · Not analysed yet · Published 6 Jul 2023 · Tags: CWE-256
- [Plaintext password storage in Ovarro TBox MS-CPU32 and others](https://agentprime.io/advisories/CVE-2023-3395.md)
  `CVE-2023-3395` · CVE record: Ovarro TBox MS-CPU32 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 3 Jul 2023 · Tags: CWE-256
- [Plaintext password storage in Fortinet FortiSIEM](https://agentprime.io/advisories/CVE-2023-26204.md)
  `CVE-2023-26204` · CVE record: Fortinet FortiSIEM · CVSS 3.6 Low · Not analysed yet · Published 13 Jun 2023 · Tags: CWE-256
- [Jenkins Code Dx Plugin stores API keys in plain text](https://agentprime.io/advisories/GHSA-gpc2-f62m-c6h6.md)
  `GHSA-gpc2-f62m-c6h6`, `CVE-2023-2632` · Maven `org.jenkins-ci.plugins:codedx`: affected `<4.0.0`, fixed in `4.0.0` · CVSS 4.3 Medium · Not analysed yet · Published 16 May 2023 · Tags: Hard-coded credentials, CWE-256
- [Jenkins Code Dx Plugin displays API keys in plain text](https://agentprime.io/advisories/GHSA-352v-hhmh-2w8h.md)
  `GHSA-352v-hhmh-2w8h`, `CVE-2023-2633` · Maven `org.jenkins-ci.plugins:codedx`: affected `<4.0.0`, fixed in `4.0.0` · CVSS 4.3 Medium · Not analysed yet · Published 16 May 2023 · Tags: Hard-coded credentials, CWE-256
- [Clear-text passwords in configuration files](https://agentprime.io/advisories/CVE-2022-4308.md)
  `CVE-2022-4308` · CVE record: Secomea GateManager · CVSS 6.1 Medium · Not analysed yet · Published 19 Apr 2023 · Tags: CWE-256
- [Information Disclosure Vulnerability in MELSEC Series](https://agentprime.io/advisories/CVE-2023-0457.md)
  `CVE-2023-0457` · CVE record: Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-32MT/ES and 4 more · CVSS 7.5 High · Not analysed yet · Published 3 Mar 2023 · Tags: CWE-256
- [Plaintext password storage in Snap One Wattbox WB-300-IP-3](https://agentprime.io/advisories/CVE-2023-22389.md)
  `CVE-2023-22389` · CVE record: Snap One Wattbox WB-300-IP-3 · CVSS 5.7 Medium · Not analysed yet · Published 30 Jan 2023 · Tags: CWE-256
- [Plaintext Storage of a Password in Jenkins JIRA Pipeline Steps Plugin](https://agentprime.io/advisories/GHSA-g29v-5pwh-wxx4.md)
  `GHSA-g29v-5pwh-wxx4`, `CVE-2023-24439` · Maven `org.jenkins-ci.plugins:jira-steps`: affected `<=2.0.165.v8846cf59f3db`, no fixed version yet · CVSS 5.5 Medium · Not analysed yet · Published 26 Jan 2023 · Tags: Information disclosure, CWE-256
- [Plaintext Storage of a Password in Jenkins TestQuality Updater Plugin](https://agentprime.io/advisories/GHSA-98qc-v8vg-mcx4.md)
  `GHSA-98qc-v8vg-mcx4`, `CVE-2023-24454` · Maven `org.jenkins-ci.plugins:testquality-updater`: affected `<=1.3`, no fixed version yet · CVSS 5.5 Medium · Not analysed yet · Published 26 Jan 2023 · Tags: Information disclosure, CWE-256
- [Passwords stored in plain text by Jenkins view-cloner Plugin](https://agentprime.io/advisories/GHSA-6hw7-x86v-wrgf.md)
  `GHSA-6hw7-x86v-wrgf`, `CVE-2023-24450` · Maven `org.jenkins-ci.plugins:view-cloner`: affected `<=1.1`, no fixed version yet · CVSS 6.5 Medium · Not analysed yet · Published 26 Jan 2023 · Tags: Information disclosure, CWE-256
- [Plaintext storage of Access Token in Jenkins GitHub Pull Request Coverage Status Plugin](https://agentprime.io/advisories/GHSA-4x65-4fjx-r7m6.md)
  `GHSA-4x65-4fjx-r7m6`, `CVE-2023-24442` · Maven `org.jenkins-ci.plugins:github-pr-coverage-status`: affected `<=2.2.0`, no fixed version yet · CVSS 5.5 Medium · Not analysed yet · Published 26 Jan 2023 · Tags: Information disclosure, CWE-256
- [Plaintext storage of sensitive data in Rancher API and cluster.management.cattle.io objects](https://agentprime.io/advisories/GHSA-cq4p-vp5q-4522.md)
  `GHSA-cq4p-vp5q-4522`, `CVE-2022-43757` · Go `github.com/rancher/rancher`: affected `>=2.5.0, <2.5.17 || >=2.6.0, <2.6.10 || >=2.7.0, <2.7.1`, fixed in `2.5.17`, `2.6.10`, `2.7.1` · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Jan 2023 · Tags: Information disclosure, CWE-256
- [IBM Security Verify Governance, Identity Manager information disclosure](https://agentprime.io/advisories/CVE-2022-22458.md)
  `CVE-2022-22458` · CVE record: IBM Security Verify Governance, Identity Manager · CVSS 6.3 Medium · Not analysed yet · Published 22 Dec 2022 · Tags: CWE-256
- [IBM Maximo information disclosure](https://agentprime.io/advisories/CVE-2022-41732.md)
  `CVE-2022-41732` · CVE record: IBM Maximo Mobile · CVSS 6.2 Medium · Not analysed yet · Published 28 Nov 2022 · Tags: CWE-256
- [Plaintext Storage of a Password in Jenkins NS-ND Integration Performance Publisher Plugin](https://agentprime.io/advisories/GHSA-x2w2-5552-fjv6.md)
  `GHSA-x2w2-5552-fjv6`, `CVE-2022-45392` · Maven `io.jenkins.plugins:cavisson-ns-nd-integration`: affected `<4.8.0.146`, fixed in `4.8.0.146` · CVSS 6.5 Medium · Not analysed yet · Published 16 Nov 2022 · Tags: Hard-coded credentials, CWE-256
- [Jenkins Reverse Proxy Auth Plugin vulnerable due to plaintext storage of passwords](https://agentprime.io/advisories/GHSA-wcjj-qm5v-j4pc.md)
  `GHSA-wcjj-qm5v-j4pc`, `CVE-2022-45384` · Maven `org.jenkins-ci.main:reverse-proxy-auth-plugin`: affected `>=1.7.3, <1.7.4`, fixed in `1.7.4` · CVSS 6.5 Medium · Not analysed yet · Published 16 Nov 2022 · Tags: Hard-coded credentials, CWE-256
- [Plaintext password storage in Siemens QMS Automotive](https://agentprime.io/advisories/CVE-2022-43958.md)
  `CVE-2022-43958` · CVE record: Siemens QMS Automotive · CVSS 7.6 High · Not analysed yet · Published 8 Nov 2022 · Tags: CWE-256
- [Plaintext storage of tokens in pulp_ansible](https://agentprime.io/advisories/GHSA-qv37-mfjf-42h8.md)
  `GHSA-qv37-mfjf-42h8`, `CVE-2022-3644`, `PYSEC-2026-900` · PyPI `pulp-ansible`: affected `<0.15.0`, fixed in `0.15.0` · CVSS 5.5 Medium · Not analysed yet · Published 25 Oct 2022 · Tags: Hard-coded credentials, CWE-256
- [AWS secrets displayed without masking by Jenkins S3 Explorer Plugin](https://agentprime.io/advisories/GHSA-mf4p-wjrm-cmjp.md)
  `GHSA-mf4p-wjrm-cmjp`, `CVE-2022-43426` · Maven `io.jenkins.plugins:s3explorer`: affected `<=1.0.8`, no fixed version yet · CVSS 3.1 Low · Not analysed yet · Published 19 Oct 2022 · Tags: CWE-256, CWE-549
- [API keys stored in plain text by Jenkins Katalon Plugin](https://agentprime.io/advisories/GHSA-35rx-7pc8-6963.md)
  `GHSA-35rx-7pc8-6963`, `CVE-2022-43419` · Maven `org.jenkins-ci.plugins:katalon`: affected `<1.0.33`, fixed in `1.0.33` · CVSS 4.3 Medium · Not analysed yet · Published 19 Oct 2022 · Tags: Hard-coded credentials, CWE-256
- [etcd user credentials are stored in WAL logs in plaintext](https://agentprime.io/advisories/GHSA-528j-9r78-wffx.md)
  `GHSA-528j-9r78-wffx` · Go `go.etcd.io/etcd/client/v3`: affected `<3.3.23 || >=3.4.0, <3.4.10`, fixed in `3.3.23`, `3.4.10` · No CVSS score · Not analysed yet · Published 6 Oct 2022 · Tags: CWE-256
- [Plaintext password storage in fwupd](https://agentprime.io/advisories/CVE-2022-3287.md)
  `CVE-2022-3287` · CVE record: fwupd · CVSS 6.5 Medium · Not analysed yet · Published 28 Sept 2022 · Tags: CWE-256
- [Jenkins BigPanda Notifier Plugin stores BigPanda API key unencrypted](https://agentprime.io/advisories/GHSA-j7xv-fc46-hgpg.md)
  `GHSA-j7xv-fc46-hgpg`, `CVE-2022-41247` · Maven `org.jenkins-ci.plugins:bigpanda-jenkins`: affected `<=1.4.0`, no fixed version yet · CVSS 3.3 Low · Not analysed yet · Published 22 Sept 2022 · Tags: Hard-coded credentials, CWE-256
- [API token stored in plain text by Jenkins CONS3RT Plugin](https://agentprime.io/advisories/GHSA-fmq9-r4p2-8272.md)
  `GHSA-fmq9-r4p2-8272`, `CVE-2022-41255` · Maven `org.jenkins-ci.plugins:cons3rt`: affected `<=1.0.0`, no fixed version yet · CVSS 3.3 Low · Not analysed yet · Published 22 Sept 2022 · Tags: Hard-coded credentials, CWE-256
- [RabbitMQ password stored in plain text by Jenkins CollabNet Plugins Plugin](https://agentprime.io/advisories/GHSA-qh87-2qvh-5jf8.md)
  `GHSA-qh87-2qvh-5jf8`, `CVE-2022-38665` · Maven `org.jenkins-ci.plugins:collabnet`: affected `<2.0.9`, fixed in `2.0.9` · CVSS 3.3 Low · Not analysed yet · Published 24 Aug 2022 · Tags: Hard-coded credentials, CWE-256
- [Plaintext password storage in Airspan AirVelocity](https://agentprime.io/advisories/CVE-2022-36308.md)
  `CVE-2022-36308` · CVE record: Airspan AirVelocity · No CVSS score · Not analysed yet · Published 16 Aug 2022 · Tags: CWE-256
- [Plaintext password storage in Dell Wyse Management Suite](https://agentprime.io/advisories/CVE-2022-33928.md)
  `CVE-2022-33928` · CVE record: Dell Wyse Management Suite · CVSS 6.4 Medium · Not analysed yet · Published 10 Aug 2022 · Tags: CWE-256
- [Jenkins HTTP Request Plugin stores HTTP Request passwords unencrypted](https://agentprime.io/advisories/GHSA-2qh6-hhvv-m2ww.md)
  `GHSA-2qh6-hhvv-m2ww`, `CVE-2022-36901` · Maven `org.jenkins-ci.plugins:http_request`: affected `<1.16`, fixed in `1.16` · CVSS 3.3 Low · Not analysed yet · Published 28 Jul 2022 · Tags: Information disclosure, CWE-256
- [Plaintext Storage of a password in CODESYS V3 OPC DA Server](https://agentprime.io/advisories/CVE-2022-1794.md)
  `CVE-2022-1794` · CVE record: CODESYS CODESYS OPC DA Server · CVSS 5.5 Medium · Not analysed yet · Published 11 Jul 2022 · Tags: CWE-256
- [HCL Launch is vulnerable to information disclosure which can be read by a local user.](https://agentprime.io/advisories/CVE-2022-27548.md)
  `CVE-2022-27548` · CVE record: HCL Software HCL Launch · CVSS 4.9 Medium · Not analysed yet · Published 6 Jul 2022 · Tags: CWE-256
- [Password stored in plain text by Jenkins RQM Plugin](https://agentprime.io/advisories/GHSA-m59q-vgq9-75cr.md)
  `GHSA-m59q-vgq9-75cr`, `CVE-2022-34809` · Maven `net.praqma:rqm-plugin`: affected `<=2.8`, no fixed version yet · CVSS 3.3 Low · Not analysed yet · Published 1 Jul 2022 · Tags: Hard-coded credentials, CWE-256
- [Plaintext Storage of a Password in Jenkins Elasticsearch Query Plugin](https://agentprime.io/advisories/GHSA-h5h5-m2mc-j2pv.md)
  `GHSA-h5h5-m2mc-j2pv`, `CVE-2022-34807` · Maven `org.jenkins-ci.plugins:elasticsearch-query`: affected `<=1.2`, no fixed version yet · CVSS 3.3 Low · Not analysed yet · Published 1 Jul 2022 · Tags: Hard-coded credentials, CWE-256
- [Plaintext Storage of a Password in Jenkins Jigomerge Plugin](https://agentprime.io/advisories/GHSA-h5g3-v72x-hc6f.md)
  `GHSA-h5g3-v72x-hc6f`, `CVE-2022-34806` · Maven `org.jenkins-ci.plugins:jigomerge`: affected `<=0.9`, no fixed version yet · CVSS 3.3 Low · Not analysed yet · Published 1 Jul 2022 · Tags: Hard-coded credentials, CWE-256
- [Plaintext Storage of a Password in Jenkins Skype notifier Plugin](https://agentprime.io/advisories/GHSA-gvmr-mp5q-9wvw.md)
  `GHSA-gvmr-mp5q-9wvw`, `CVE-2022-34805` · Maven `org.jenkins-ci.plugins:skype-notifier`: affected `<=1.1.0`, no fixed version yet · CVSS 3.3 Low · Not analysed yet · Published 1 Jul 2022 · Tags: Hard-coded credentials, CWE-256
- [Passwords stored in plain text by Jenkins hpe-network-virtualization plugin](https://agentprime.io/advisories/GHSA-36j8-f33j-vjwq.md)
  `GHSA-36j8-f33j-vjwq`, `CVE-2022-34816` · Maven `org.jenkins-ci.plugins:hpe-network-virtualization`: affected `=1.0`, no fixed version yet · CVSS 3.3 Low · Not analysed yet · Published 1 Jul 2022 · Tags: Hard-coded credentials, CWE-256
- [Jenkins OpsGenie Plugin Plaintext Storage of a Password vulnerability](https://agentprime.io/advisories/GHSA-273c-fjw8-v2w8.md)
  `GHSA-273c-fjw8-v2w8`, `CVE-2022-34803` · Maven `org.jenkins-ci.plugins:opsgenie`: affected `<=1.9`, no fixed version yet · CVSS 4.3 Medium · Not analysed yet · Published 1 Jul 2022 · Tags: Hard-coded credentials, CWE-256
- [Plaintext Storage of a Password in Jenkins Build Notifications Plugin](https://agentprime.io/advisories/GHSA-v3r8-6vfj-pppf.md)
  `GHSA-v3r8-6vfj-pppf`, `CVE-2022-34800` · Maven `tools.devnull:build-notifications`: affected `<=1.5.0`, no fixed version yet · CVSS 3.3 Low · Not analysed yet · Published 1 Jul 2022 · Tags: Hard-coded credentials, CWE-256
- [Plaintext Storage of a Password in Jenkins RocketChat Notifier Plugin](https://agentprime.io/advisories/GHSA-pgp9-x83g-v8x8.md)
  `GHSA-pgp9-x83g-v8x8`, `CVE-2022-34802` · Maven `org.jenkins-ci.plugins:rocketchatnotifier`: affected `<=1.5.2`, no fixed version yet · CVSS 3.3 Low · Not analysed yet · Published 1 Jul 2022 · Tags: Hard-coded credentials, CWE-256
- [Plaintext Storage of a Password in Jenkins Deployment Dashboard Plugin](https://agentprime.io/advisories/GHSA-56hc-wf49-2h96.md)
  `GHSA-56hc-wf49-2h96`, `CVE-2022-34799` · Maven `org.jenkins-ci.plugins:ec2-deployment-dashboard`: affected `<=1.0.10`, no fixed version yet · CVSS 3.3 Low · Not analysed yet · Published 1 Jul 2022 · Tags: Hard-coded credentials, CWE-256
- [User passwords stored in plain text by Jenkins EasyQA Plugin](https://agentprime.io/advisories/GHSA-xcp5-j5fj-3xp6.md)
  `GHSA-xcp5-j5fj-3xp6`, `CVE-2022-34202` · Maven `com.geteasyqa:easyqa`: affected `<=1.0`, no fixed version yet · CVSS 3.3 Low · Not analysed yet · Published 24 Jun 2022 · Tags: CWE-256
- [Plaintext Storage of a Password in Jenkins Convertigo Mobile Platform Plugin](https://agentprime.io/advisories/GHSA-c8mf-mc3f-2wvc.md)
  `GHSA-c8mf-mc3f-2wvc`, `CVE-2022-34199` · Maven `com.convertigo.jenkins.plugins:convertigo-mobile-platform`: affected `<=1.1`, no fixed version yet · CVSS 4.3 Medium · Not analysed yet · Published 24 Jun 2022 · Tags: Hard-coded credentials, CWE-256
- [Rundeck's Key Storage converter plugin mechanism's encryption layer not working in 4.2.0, 4.2.1, 4.3.0](https://agentprime.io/advisories/GHSA-hprf-rrwq-jm5c.md)
  `GHSA-hprf-rrwq-jm5c`, `CVE-2022-31044` · Maven `org.rundeck:rundeck`: affected `>=4.2.0, <4.2.2 || >=4.3.0, <4.3.1`, fixed in `4.2.2`, `4.3.1` · CVSS 7.5 High · Not analysed yet · Published 17 Jun 2022 · Tags: Hard-coded credentials, CWE-256
- [Plaintext password storage in Dell Unity](https://agentprime.io/advisories/CVE-2022-29085.md)
  `CVE-2022-29085` · CVE record: Dell Unity · CVSS 6.4 Medium · Not analysed yet · Published 2 Jun 2022 · Tags: CWE-256
- [Plaintext password storage in Dell PowerStore](https://agentprime.io/advisories/CVE-2022-22557.md)
  `CVE-2022-22557` · CVE record: Dell PowerStore · CVSS 7.5 High · Not analysed yet · Published 2 Jun 2022 · Tags: CWE-256
- [Jenkins Gem Publisher Plugin stores credentials as plaintext](https://agentprime.io/advisories/GHSA-6pqm-pp65-mc26.md)
  `GHSA-6pqm-pp65-mc26`, `CVE-2019-10426` · Maven `net.arangamani.jenkins:gem-publisher`: affected `<=1.0`, no fixed version yet · CVSS 5.5 Medium · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials, CWE-256
- [Plaintext password storage in Jenkins InfluxDB Plugin](https://agentprime.io/advisories/GHSA-rv97-r8f7-8wmg.md)
  `GHSA-rv97-r8f7-8wmg`, `CVE-2019-10329` · Maven `org.jenkins-ci.plugins:influxdb`: affected `<1.22`, fixed in `1.22` · CVSS 8.8 High · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials, CWE-256
- [Password stored in plain text by Jenkins Nomad Plugin](https://agentprime.io/advisories/GHSA-5c2c-cvg6-ghjm.md)
  `GHSA-5c2c-cvg6-ghjm`, `CVE-2021-21681` · Maven `org.jenkins-ci.plugins:nomad`: affected `<0.7.5`, fixed in `0.7.5` · CVSS 5.5 Medium · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials, CWE-256
- [Password stored in plain text by Jenkins VMware Lab Manager Slaves Plugin](https://agentprime.io/advisories/GHSA-cg4h-cfjp-h3x2.md)
  `GHSA-cg4h-cfjp-h3x2`, `CVE-2020-2319` · Maven `org.jenkins-ci.plugins:labmanager`: affected `<=0.2.8`, no fixed version yet · CVSS 3.3 Low · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials, CWE-256
- [Passwords stored in plain text by Mail Commander Plugin for Jenkins-ci Plugin](https://agentprime.io/advisories/GHSA-485q-v457-3p58.md)
  `GHSA-485q-v457-3p58`, `CVE-2020-2318` · Maven `org.jenkins-ci.plugins:mailcommander`: affected `<=1.0.0`, no fixed version yet · CVSS 6.5 Medium · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials, CWE-256
- [Password stored in plain text by Jenkins AppSpider Plugin](https://agentprime.io/advisories/GHSA-rm7r-xv53-xwc3.md)
  `GHSA-rm7r-xv53-xwc3`, `CVE-2020-2314` · Maven `com.rapid7:jenkinsci-appspider-plugin`: affected `<1.0.13`, fixed in `1.0.13` · CVSS 3.3 Low · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials, CWE-256
- [Passwords stored in plain text by Jenkins ReadyAPI Functional Testing Plugin](https://agentprime.io/advisories/GHSA-ccwp-633j-g29v.md)
  `GHSA-ccwp-633j-g29v`, `CVE-2020-2250` · Maven `org.jenkins-ci.plugins:soapui-pro-functional-testing`: affected `<1.4`, fixed in `1.4` · CVSS 4.3 Medium · Not analysed yet · Published 24 May 2022 · Tags: Weak cryptography or TLS, CWE-256
- [Secret stored in plain text by Jenkins Parameterized Remote Trigger Plugin](https://agentprime.io/advisories/GHSA-wphq-j78p-fhgp.md)
  `GHSA-wphq-j78p-fhgp`, `CVE-2020-2239` · Maven `org.jenkins-ci.plugins:Parameterized-Remote-Trigger`: affected `<3.1.4`, fixed in `3.1.4` · CVSS 3.3 Low · Not analysed yet · Published 24 May 2022 · Tags: Weak cryptography or TLS, CWE-256
- [Credentials stored in plain text by Jenkins tfs Plugin](https://agentprime.io/advisories/GHSA-w6c2-jrhh-jrxg.md)
  `GHSA-w6c2-jrhh-jrxg`, `CVE-2020-2249` · Maven `org.jenkins-ci.plugins:tfs`: affected `<=5.157.1`, no fixed version yet · CVSS 3.3 Low · Not analysed yet · Published 24 May 2022 · Tags: Weak cryptography or TLS, CWE-256
- [Password stored in plain text by Jenkins HP ALM Quality Center Plugin](https://agentprime.io/advisories/GHSA-fc3j-cfqv-pfrm.md)
  `GHSA-fc3j-cfqv-pfrm`, `CVE-2020-2218` · Maven `org.jenkins-ci.plugins:hp-quality-center`: affected `<=1.6`, no fixed version yet · CVSS 3.3 Low · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials, CWE-256

Newest: <https://agentprime.io/advisories/tag/cwe-256.md>
Older: <https://agentprime.io/advisories/tag/cwe-256.md?cursor=WyIyMDIyLTA1LTI0VDE3OjIyOjIwLjAwMDAwMFoiLCJHSFNBLWZjM2otY2Zxdi1wZnJtIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-256&cursor=WyIyMDIzLTA5LTE1VDIwOjIwOjE4LjQ4MTAwMFoiLCJDVkUtMjAyMi0zMjYxIl0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-256/?cursor=WyIyMDIzLTA5LTE1VDIwOjIwOjE4LjQ4MTAwMFoiLCJDVkUtMjAyMi0zMjYxIl0>. Everything for agents: <https://agentprime.io/llms.txt>.