Advisories · Weakness
CWE-256.
Every Advisory and CVE whose sources give the weakness CWE-256, newest first.
- CVSS 4.3 Medium
Credentials stored in plain text by Jenkins White Source Plugin
- Hard-coded credentials
- CWE-256
<20.8.1 · fixed in 20.8.1
GHSA-v8v2-fhgv-3vq2 · CVE-2020-2213 - CVSS 4.3 Medium
Password stored in plain text by Jenkins TestComplete support Plugin
- Hard-coded credentials
- CWE-256
<2.5.2 · fixed in 2.5.2
GHSA-r32r-f6wr-cc3w · CVE-2020-2209 - CVSS 4.3 Medium
Secret stored in plain text by Jenkins Slack Upload Plugin
- Hard-coded credentials
- CWE-256
<=1.7 · no fixed version yet
GHSA-656g-hf8v-x2rw · CVE-2020-2208 - CVSS 4.3 Medium
Secret stored in plain text by Jenkins GitHub Coverage Reporter Plugin
- Hard-coded credentials
- CWE-256
<=1.10 · no fixed version yet
GHSA-5r5f-hcwf-r9jh · CVE-2020-2212 - CVSS 4.3 Medium
Credentials stored in plain text by Jenkins Copr Plugin
- Information disclosure
- CWE-256
<0.6.1 · fixed in 0.6.1
GHSA-4wx5-c723-xvwv · CVE-2020-2177 - CVSS 3.3 Low
Jenkins Zephyr for JIRA Test Management Plugin stores credentials in plain text
- Information disclosure
- CWE-256
<=1.5 · no fixed version yet
GHSA-m365-98j8-w96w · CVE-2020-2154 - CVSS 3.3 Low
Credentials stored in plain text by Zephyr Enterprise Test Management Plugin
- Hard-coded credentials
- CWE-256
<1.10 · fixed in 1.10
GHSA-xv58-gp43-6m76 · CVE-2020-2145 - CVSS 4.3 Medium
Passwords stored in plain text by Harvest SCM Plugin
- Hard-coded credentials
- CWE-256
<=0.5.1 · no fixed version yet
GHSA-qj7p-9hgf-x8j7 · CVE-2020-2131 - CVSS 4.3 Medium
Passwords stored in plain text by Harvest SCM Plugin
- Hard-coded credentials
- CWE-256
<=0.5.1 · no fixed version yet
GHSA-jmp9-f42q-4g85 · CVE-2020-2130 - CVSS 4.3 Medium
Password stored in plain text by Applatix Plugin
- Hard-coded credentials
- CWE-256
<=1.1 · no fixed version yet
GHSA-54m9-h7qp-fwvg · CVE-2020-2133 - CVSS 6.5 Medium
Plaintext Storage of a Password in Jenkins Eagle Tester Plugin
- Hard-coded credentials
- CWE-256
<=1.0.9 · no fixed version yet
GHSA-vj6f-q4w6-qx9p · CVE-2020-2129 - CVSS 4.3 Medium
Password stored in plain text by Dynamic Extended Choice Parameter Plugin
- Hard-coded credentials
- CWE-256
<=1.0.1 · no fixed version yet
GHSA-h6pp-v4j6-w76c · CVE-2020-2124 - CVSS 4.3 Medium
Password stored in plain text by Parasoft Environment Manager Plugin
- Hard-coded credentials
- CWE-256
<2.15 · fixed in 2.15
GHSA-gmg2-3w6v-945p · CVE-2020-2132 - CVSS 3.3 Low
Token stored in plain text by DigitalOcean Plugin
- Hard-coded credentials
- CWE-256
<1.2.0 · fixed in 1.2.0
GHSA-8g6v-g8qc-5w7j · CVE-2020-2126 - CVSS 4.3 Medium
Password stored in plain text by ECX Copy Data Management Plugin
- Hard-coded credentials
- CWE-256
<=1.9 · no fixed version yet
GHSA-6793-gmp9-2535 · CVE-2020-2128 - CVSS 3.3 Low
Credentials stored in plain text by debian-package-builder Plugin
- Hard-coded credentials
- CWE-256
<=1.6.11 · no fixed version yet
GHSA-64jr-ggw8-h9jc · CVE-2020-2125 - CVSS 3.3 Low
Credential stored in plain text by BMC Release Package and Deployment Plugin
- Hard-coded credentials
- CWE-256
<=1.1 · no fixed version yet
GHSA-2j3r-x6xc-qqqj · CVE-2020-2127 - CVSS 3.1 Low
Client secret transmitted in plain text by Azure AD Plugin
- Hard-coded credentials
- CWE-256
<1.2.0 · fixed in 1.2.0
GHSA-vvg2-hg3c-mqj3 · CVE-2020-2119 - CVSS 4.3 Medium
Fortify Plugin stored credentials in plain text
- Hard-coded credentials
- CWE-256
<19.2.30 · fixed in 19.2.30
GHSA-xr37-pjfh-qwwc · CVE-2020-2107 - CVSS 3.3 Low
Jenkins Weibo Plugin stores credentials unencrypted in its global configuration file
- Hard-coded credentials
- CWE-256
<=1.0.1 · no fixed version yet
GHSA-5c97-gxr3-r368 · CVE-2019-16572 -
Plaintext Storage in Jenkins Spira Importer Plugin
- CWE-256
<3.2.3 · fixed in 3.2.3
GHSA-pwg7-4hxv-v4cw · CVE-2019-16543 - CVSS 3.3 Low
DingTalk Plugin stores credentials in plain text
- Information disclosure
- CWE-256
<2.0.0 · fixed in 2.0.0
GHSA-xg8p-cp7f-cphx · CVE-2019-10433 -
Jenkins LDAP Email Plugin shows plain text password in configuration form
- CWE-256
<=0.8 · no fixed version yet
GHSA-53jw-4gwh-m8cm · CVE-2019-10434 - CVSS 5.5 Medium
Plaintext Storage of a Password in Jenkins Configuration as Code Plugin
- Hard-coded credentials
- Information disclosure
<1.25 · fixed in 1.25
GHSA-ggmx-pq89-7mcr · CVE-2019-10345 - CVSS 8.8 High
Jenkins jira-ext Plugin stores credentials unencrypted
- Hard-coded credentials
- CWE-256
<0.9 · fixed in 0.9
GHSA-chm8-wp3h-f4m3 · CVE-2019-10302 - CVSS 7.5 High
Automation Direct CLICK PLC CPU Modules Plaintext Storage of a Password
- Automation Direct CLICK PLC CPU Modules: C0-1x CPUs
- CWE-256
- CVSS 6.5 Medium
Plaintext storage in Jenkins instant-messaging Plugin
- Hard-coded credentials
- CWE-256
<1.42 · fixed in 1.42
GHSA-hpm9-fx8v-w45v · CVE-2022-28135 - CVSS 7.8 High
Rockwell Automation ISaGRAF5 Runtime Unprotected Storage of Credentials
- Rockwell Automation ISaGRAF Runtime
- CWE-256
- CVSS 4.3 Medium
Personal tokens stored in plain text by Jenkins incapptic connect uploader Plugin
- Hard-coded credentials
- CWE-256
<=1.15 · no fixed version yet
GHSA-8g9w-5jv6-7m4x · CVE-2022-27218 - CVSS 6.0 Medium
Plaintext password storage in Dell EMC Enterprise Storage Analytics for vRealize Operations
- Dell EMC Enterprise Storage Analytics for vRealize Operations
- CWE-256
- CVSS 8.2 High
Plaintext password storage in DellEMC System Update - DSU
- DellEMC System Update - DSU
- CWE-256
- CVSS 6.5 Medium
Fresenius Kabi Agilia Connect Infusion System plaintext storage of a password
- Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard)
- Fresenius Kabi Agilia Partner
- CWE-256
- CVSS 6.7 Medium
Plaintext password storage in Dell Avamar
- Dell Avamar
- CWE-256
- CVSS 6.4 Medium
Plaintext password storage in Motorola Binatone Hubble Cameras
- Motorola Binatone Hubble Cameras
- CWE-256
- CVSS 7.1 High
Plaintext password storage in Dell Enterprise SONiC OS
- Dell Enterprise SONiC OS
- CWE-256
- CVSS 6.5 Medium
Cisco SD-WAN vManage Software Disaster Recovery Feature Password Exposure Vulnerability
- Cisco SD-WAN vManage
- CWE-256
- CVSS 8.8 High
Plaintext password storage in Dell EMC Repository Manager (DRM)
- Dell EMC Repository Manager (DRM)
- CWE-256
- CVSS 4.0 Medium
Plaintext password storage in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-256
- CVSS 5.5 Medium
Cisco Firepower Management Center Information Disclosure Vulnerability
- Cisco Firepower Management Center
- CWE-256
- CVSS 4.1 Medium
Cisco IoT Field Network Director Unprotected Storage of Credentials Vulnerability
- Cisco IoT Field Network Director (IoT-FND)
- CWE-256
-
Plaintext password storage in Nextcloud Server
- Nextcloud Server
- CWE-256
- CVSS 6.3 Medium
Junos OS: NFX350: Password hashes stored in world-readable format
- Juniper Networks Junos OS
- CWE-256
- CVSS 7.1 High
Duo Network Gateway (DNG) Information Disclosure Vulnerability
- Cisco Duo Network Gateway (DNG)
- CWE-256
-
Plaintext password storage in Grundfos CIM 500
- Grundfos CIM 500
- CWE-256
-
Storing Password in Local Storage
- CWE-256
<2.10.0 · fixed in 2.10.0
GHSA-wvh7-5p38-2qfc - CVSS 8.8 High
Plaintext password storage in Dell OMIMSSC (OpenManage Integration for Microsoft System Center)
- Dell OMIMSSC (OpenManage Integration for Microsoft System Center)
- CWE-256
- CVSS 6.2 Medium
ABB/Busch-Jaeger Telephone Gateway TG/S 3.2 Plaintext storing of credentials
- ABB TG/S 3.2 Telephone Gateway
- Busch-Jaeger 6186/11 Telefon-Gateway
- CWE-256
-
Plaintext password storage in GE CARESCAPE Telemetry Server,ApexPro Telemetry Server,CARESCAPE Central…
- GE CARESCAPE Telemetry Server,ApexPro Telemetry Server,CARESCAPE Central Station,Clinical Information Center,CARESCAPE B450,B650,B850 Monitors
- CWE-256
- CVSS 5.6 Medium
SBR Carrier: A vulnerability in the identity and access management certificate generation procedure allows a local attacker to gain access to confidential information.
- Juniper Networks SBR Carrier
- CWE-256
-
Plaintext password storage in Siemens LOGO! 8 BM (incl. SIPLUS variants)
- Siemens LOGO! 8 BM (incl. SIPLUS variants)
- CWE-256
- CVSS 6.5 Medium
Junos Space Service Now and Service Insight: Organization username and password stored in plaintext in log files.
- Juniper Networks Service Insight
- Juniper Networks Service Now
- CWE-256
-
Plaintext password storage in Detcon Sitewatch Gateway
- Detcon Sitewatch Gateway
- CWE-256
-
Plaintext password storage in ICS-CERT Moxa IKS, EDS
- ICS-CERT Moxa IKS, EDS
- CWE-256
-
Plaintext password storage in Ice Qube Thermal Management Center
- Ice Qube Thermal Management Center
- CWE-256
- CVSS 9.8 CriticalCritical · CVSS 9+
Plaintext password storage in Echelon SmartServer 1 and others
- Echelon SmartServer 1
- Echelon SmartServer 2
- CWE-256
-
Plaintext password storage in ICS-CERT BeaconMedaes TotalAlert Scroll Medical Air Systems web application
- ICS-CERT BeaconMedaes TotalAlert Scroll Medical Air Systems web application
- CWE-256
-
Plaintext password storage in ICS-CERT BeaconMedæs TotalAlert Scroll Medical Air Systems web…
- ICS-CERT BeaconMedæs TotalAlert Scroll Medical Air Systems web application
- CWE-256
- CVSS 3.4 Low
An issue was discovered in SMA Solar Technology products.
- CWE-256
-
Plaintext password storage in Moxa OnCell
- Moxa OnCell
- CWE-256