CWE-256.

Plaintext password storage in Dell VxRail HCI

• Dell VxRail HCI
• CWE-256

Billion Electric router - Plaintext Storage of a Password

• Billion Electric M100
• Billion Electric M150
• CWE-256

Media Types: Office365, SMTP passwords are unencrypted and visible in plaintext when exported

• Zabbix
• CWE-256

Plaintext password storage in Sharp Corporation Multiple MFPs (multifunction printers) and others

• Sharp Corporation Multiple MFPs (multifunction printers)
• Toshiba Tec Corporation Multiple MFPs (multifunction printers)
• CWE-256

IBM Workload Scheduler information disclosure

• IBM Workload Scheduler
• CWE-256

Change-Password via Portal-Profile sets PimcoreBackendUser password without hashing

• pimcore
• CWE-256

Plaintext password storage in TECHNO SUPPORT COMPANY Smart-tab Android app

• TECHNO SUPPORT COMPANY Smart-tab Android app
• CWE-256

IBM Cognos Command Center information disclosure

• IBM Cognos Command Center
• CWE-256

Plaintext Storage of a Password in Eliz Software's Panel

• Eliz Software Panel
• CWE-256

Victure PC420 1.1.39 was discovered to contain a hardcoded root password which is stored in plaintext.

• Hard-coded credentials
• CWE-256

Cisco Routed Passive Optical Network Cleartext Password Vulnerability

• Cisco IOS XR Software
• CWE-256

Information disclosure vulnerability in SAP NetWeaver AS for Java (Destination Service)

• SAP_SE SAP NetWeaver AS for Java (Destination Service)
• CWE-256

Vulnerability in Hathway Skyworth Router CM5100 v.4.1.1.24 allows a physically proximate attacker to obtain user credentials via SPI flash Firmware W25Q64JV.

• CWE-256

calamares-nixos-extensions LUKS keyfile exposure regression on legacy BIOS systems

• calamares-nixos-extensions
• CWE-256

IBM QRadar Suite Software information disclosure

• IBM QRadar Suite Software
• IBM Cloud Pak for Security
• CWE-256

Plaintext password storage in Siemens LOGO! 12/24RCE and others

• Siemens LOGO! 12/24RCE
• Siemens LOGO! 12/24RCEo
• CWE-256

Front-end audit log shows passwords in plaintext

• Zabbix
• CWE-256

Hamastar MeetingHub Paperless Meetings - Plaintext Storage of a Password

• Hamastar Technology MeetingHub Paperless Meetings
• CWE-256

Plaintext password storage in Dell Data Manager Appliance Software (DMAS)

• Dell Data Manager Appliance Software (DMAS)
• CWE-256

Plaintext password storage in Plug&Track Sensor Net Connect V2

• Plug&Track Sensor Net Connect V2
• CWE-256

An issue in Solar-Log 1000 before v2.8.2 and build 52-23.04.2013 was discovered to store plaintext passwords in the export.html, email.html, and sms.html files -- fixed with 3.0.0-60 11.10.2013 for S…

• CWE-256

Zowe CLI allows storage of previously entered secure credentials in a plaintext file

• CWE-256

>=7.18.0, <7.23.5 · fixed in 7.23.5

IBM Datacap Navigator information disclosure

• IBM Datacap Navigator
• CWE-256

BAS-IP AV-01D, AV-01MD, AV-01MFD, AV-01ED, AV-01KD, AV-01BD, AV-01KBD, AV-02D, AV-02IDE, AV-02IDR, AV-02IPD, AV-02FDE, AV-02FDR, AV-03D, AV-03BD, AV-04AFD, AV-04ASD, AV-04FD, AV-04SD, AV-05FD, AV-05S…

• CWE-256

Rancher's RKE1 Encryption Config kept in plain-text within cluster AppliedSpec

• Information disclosure
• CWE-256

>=2.7.0, <2.7.14 || >=2.8.0, <2.8.5 · fixed in 2.7.14, 2.8.5

Insecure permissions

• Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP)
• Broken access control
• Weak cryptography or TLS

LB-LINK BL-W1210M v2.0 was discovered to store user credentials in plaintext within the router's firmware.

• CWE-256

IBM Jazz Reporting Service information disclosure

• IBM Jazz Reporting Service
• CWE-256

Plaintext password storage in Canonical Ltd. subiquity

• Canonical Ltd. subiquity
• CWE-256

An issue in Debezium Community debezium-ui v.2.5 allows a local attacker to execute arbitrary code via the refresh page function.

• CWE-256

TYPO3 Information Disclosure in User Authentication

• CWE-256

>=9.0.0, <9.5.6 · fixed in 9.5.6

Westermo EDW-100 devices through 2024-05-03 allow an unauthenticated user to download a configuration file containing a cleartext password.

• Hard-coded credentials
• CWE-256

Password Storage in Plaintext Vulnerability in Digisol Router

• Digisol Router DG-GR1321
• CWE-256

Storing credentials in plaintext in CemiPark

• CEMI Tomasz Pawełek CemiPark
• CWE-256

Plaintext password storage in Dell Update Manager Plugin

• Dell Update Manager Plugin
• CWE-256

Plaintext password storage in Dell OpenManage Enterprise

• Dell OpenManage Enterprise
• CWE-256

Asus RT-N12+ B1 router stores credentials in cleartext, which could allow local attackers to obtain unauthorized access and modify router settings.

• Hard-coded credentials
• CWE-256

Mirror-registry: database user and password stored in plain-text

• mirror registry for Red Hat OpenShift
• CWE-256

Mirror-registry: redis password stored in plain-text

• mirror registry for Red Hat OpenShift
• CWE-256

Mirror-registry: default database secret key stored in plain-text on initial configuration file

• mirror registry for Red Hat OpenShift
• CWE-256

Mirror-registry: plain-text default csrf secret key

• mirror registry for Red Hat OpenShift
• CWE-256

Plaintext password storage in BUFFALO INC. WSR-2533DHP and others

• BUFFALO INC. WSR-2533DHP
• BUFFALO INC. WSR-2533DHPL
• CWE-256

IBM QRadar Suite Software information disclosure

• IBM QRadar Suite Software
• IBM Cloud Pak for Security
• CWE-256

AutomationDirect C-MORE EA9 HMI Plaintext Storage of a Password

• AutomationDirect C-MORE EA9 HMI EA9-T6CL
• AutomationDirect C-MORE EA9 HMI EA9-T7CL
• CWE-256

Visual Studio Code Elevation of Privilege Vulnerability

• Microsoft Visual Studio Code
• CWE-256

BackWPup <= 4.0.2 - Plaintext Storage of Backup Destination Password

• wp_media BackWPup – WordPress Backup & Restore Plugin
• CWE-256

EventStoreDB Projections Subsystem has potential password leak

• EventStore
• CWE-256

IBM Storage Defender - Resiliency Service information disclosure

• IBM Storage Defender - Resiliency Service
• CWE-256

Password Disclosure in Mia Technology's Mia-Med

• Mia Technology Inc. MİA-MED
• CWE-256

IBM Security Access Manager Container information disclosure

• IBM Security Verify Access Appliance
• IBM Security Verify Access Docker
• CWE-256

Plaintext Storage of a Password in Rapid SCADA

• Rapid Software LLC Rapid SCADA
• CWE-256

Plaintext password storage in Dell NetWorker Module for Databases and Applications - Oracle

• Dell NetWorker Module for Databases and Applications - Oracle
• CWE-256

Plaintext password storage in Dell PowerProtect Data Manager DM5500 Appliance

• Dell PowerProtect Data Manager DM5500 Appliance
• CWE-256

Clear Text Credentials Exposed via Onboarding Task

• Information disclosure
• CWE-256

>=2.0.0, <3.0.0 · fixed in 3.0.0

EisBaer Scada - CWE-256: Plaintext Storage of a Password

• EisBaer Scada v3.0.6433.1964
• CWE-256

Insecure storage of password in easySoft

• Eaton easySoft
• CWE-256

Information Disclosure Vulnerability in SnapGathers

• NetApp SnapGathers
• CWE-256

Unprotected Storage of Credentials in Ormazabal products

• Ormazabal ekorCCP
• Ormazabal ekorRCI
• CWE-256

Socomec MOD3GP-SY-120K Plaintext Storage of a Password

• Socomec MODULYS GP (MOD3GP-SY-120K)
• CWE-256

Plain-text passwords saved in /var/log/messages

• openstack
• Red Hat OpenStack Platform 16.2
• CWE-256