Advisories · Weakness
CWE-549.
Every Advisory and CVE whose sources give the weakness CWE-549, newest first.
- CVSS 4.6 Medium
Missing Password Masking in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer and Hitachi Ops Center Analyzer viewpoint
- Hitachi Ops Center Analyzer
- Hitachi Ops Center Analyzer viewpoint
- CWE-549
- CVSS 5.1 Medium
Insecure Password Storage in Y Soft SafeQ 6
- YSoft SafeQ 6
- CWE-549
- CVSS 6.5 Medium
Information Disclosure vulnerability in Application Server ABAP
- SAP_SE Application Server ABAP
- CWE-549
- CVSS 3.8 Low
sudo-rs: Partial password reveal is possible after timeout
- CWE-549
>=0.2.7, <0.2.10 · fixed in 0.2.10
GHSA-c978-wq47-pvvw · CVE-2025-64170 - CVSS 5.3 Medium
NeuVector process with sensitive arguments lead to leakage
- Hard-coded credentials
- CWE-549
<0.0.0-20250902144615-f9ddbdf42031 · fixed in 0.0.0-20250902144615-f9ddbdf42031
GHSA-w54x-xfxg-4gxq · CVE-2025-54467 - CVSS 5.3 Medium
Dígitro NGC Explorer Configuration missing password field masking
- Dígitro NGC Explorer
- Information disclosure
- CWE-549
- CVSS 4.3 Medium
Jenkins AsakusaSatellite Plugin Does not Mask API Keys via Job Configuration Form
- Weak cryptography or TLS
- CWE-549
<=0.1.1 · no fixed version yet
GHSA-m254-f6h4-p93g · CVE-2025-31728 - CVSS 4.3 Medium
Jenkins AsakusaSatellite Plugin Stores API Keys Unencrypted in Job `config.xml` Files
- Information disclosure
- CWE-549
<=0.1.1 · no fixed version yet
GHSA-fv9q-fq62-c6qg · CVE-2025-31727 - CVSS 3.1 Low
Jenkins Zoho QEngine Plugin Displays Unmasked API Keys
- Hard-coded credentials
- CWE-549
<1.0.31.v4a_b_1db_6d6a_f2 · fixed in 1.0.31.v4a_b_1db_6d6a_f2
GHSA-2x3g-rr4w-4qrp · CVE-2025-30197 - CVSS 2.6 Low
Jenkins Zoom Plugin is Missing Password Field Masking
- CWE-549
<1.6 · fixed in 1.6
GHSA-4352-jxwg-88rm · CVE-2025-0148 - CVSS 5.1 Medium
Topdata Inner Rep Plus WebServer Operator Details Form InnerRepPlus.html missing password field masking
- Topdata Inner Rep Plus WebServer
- CWE-549
- CVSS 4.6 Medium
Missing Password Field Masking Vulnerability in Hitachi Device Manager
- Hitachi Device Manager
- CWE-549
- CVSS 6.2 Medium
Information Disclosure vulnerability in EtherNet/IP Configuration tools
- Mitsubishi Electric Corporation EtherNet/IP Configuration tool for RJ71EIP91 SW1DNN-EIPCT-BD
- Mitsubishi Electric Corporation EtherNet/IP Configuration tool for FX5-ENET/IP SW1DNN-EIPCTFX5-BD
- CWE-549
- CVSS 6.5 Medium
Canon IJ Network Tool/Ver.4.7.5 and earlier (supported OS: OS X 10.9.5-macOS 13),IJ Network Tool/Ver.4.7.3 and earlier (supported OS: OS X 10.7.5-OS X 10.8) allows an attacker to acquire sensitive in…
- Canon Inc. Canon IJ NW Tool
- CWE-549
- CVSS 3.1 Low
AWS secrets displayed without masking by Jenkins S3 Explorer Plugin
- CWE-256
- CWE-549
<=1.0.8 · no fixed version yet
GHSA-mf4p-wjrm-cmjp · CVE-2022-43426 - CVSS 3.3 Low
Jenkins BigPanda Notifier Plugin Missing Password Field Masking
- Information disclosure
- CWE-549
<=1.4.0 · no fixed version yet
GHSA-cpm5-cqr9-7p79 · CVE-2022-41248 - CVSS 4.9 Medium
Cisco Identity Services Engine Sensitive Information Disclosure Vulnerability
- Cisco Identity Services Engine Software
- CWE-549
-
Devolutions Remote Desktop Manager: A lack of password masking in Devolutions Remote Desktop Manager allows physically…
- Devolutions Remote Desktop Manager
- CWE-549
- CVSS 6.7 Medium
Dell PowerScale OneFS, versions 8.2.2 and above, contain a password disclosure vulnerability.
- Dell PowerScale OneFS
- CWE-549