# Hard-coded credentials.

Passwords and keys built into the code, or weak credentials. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Jenkins Build-Publisher plugin has Insufficiently Protected Credentials](https://agentprime.io/advisories/GHSA-m3wv-fr8v-fmh7.md)
  `GHSA-m3wv-fr8v-fmh7`, `CVE-2017-1000387` · Maven `org.jenkins-ci.plugins:build-publisher`: affected `<1.22`, fixed in `1.22` · CVSS 7.8 High · Not analysed yet · Published 13 May 2022 · Tags: Hard-coded credentials
- [Jenkins SSH Plugin user passwords for encrypted SSH keys stored in plaintext](https://agentprime.io/advisories/GHSA-5gmf-8gh2-hhfp.md)
  `GHSA-5gmf-8gh2-hhfp`, `CVE-2017-1000245` · Maven `org.jenkins-ci.plugins:ssh` and 1 more: affected `<2.5`, fixed in `2.5` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 May 2022 · Tags: Hard-coded credentials
- [Improper Privilege Management in X-Pack](https://agentprime.io/advisories/GHSA-m728-qvxh-xfjq.md)
  `GHSA-m728-qvxh-xfjq`, `CVE-2017-8446` · Maven `org.elasticsearch.plugin:x-pack`: affected `<5.5.2`, fixed in `5.5.2` · CVSS 5.3 Medium · Not analysed yet · Published 13 May 2022 · Tags: Privilege escalation, Hard-coded credentials
- [Jenkins allows Administrators to Access API Tokens](https://agentprime.io/advisories/GHSA-x4m5-j4x4-4wjg.md)
  `GHSA-x4m5-j4x4-4wjg`, `CVE-2015-5323` · Maven `org.jenkins-ci.main:jenkins-core`: affected `<1.625.2 || >=1.626, <1.638`, fixed in `1.625.2`, `1.638` · CVSS 4.0, no score published · Not analysed yet · Published 13 May 2022 · Tags: Hard-coded credentials
- [OpenStack Identity Keystone and keystonemiddleware Insufficiently Protected Credentials](https://agentprime.io/advisories/GHSA-8c4w-v65p-jvcv.md)
  `GHSA-8c4w-v65p-jvcv`, `CVE-2015-7546`, `PYSEC-2016-20`, `PYSEC-2026-2549` · PyPI `keystone` and 1 more: affected `>=8.0, <8.1.0 || >=9.0.0.0b1, <9.0.0.0b2`, fixed in `8.1.0`, `9.0.0.0b2` · CVSS 7.5 High · Not analysed yet · Published 13 May 2022 · Tags: Hard-coded credentials
- [Jenkins Crowd Integration Plugin stores credentials in plain text](https://agentprime.io/advisories/GHSA-r5jr-82x4-r6j7.md)
  `GHSA-r5jr-82x4-r6j7`, `CVE-2019-1003097` · Maven `com.ds.tools.hudson:crowd`: affected `<=1.2`, no fixed version yet · CVSS 6.5 Medium · Not analysed yet · Published 13 May 2022 · Tags: Hard-coded credentials
- [Jenkins TestFairy Plugin stores credentials in plain text](https://agentprime.io/advisories/GHSA-ffv8-x822-fx73.md)
  `GHSA-ffv8-x822-fx73`, `CVE-2019-1003096` · Maven `org.jenkins-ci.plugins:TestFairy`: affected `<4.17.2`, fixed in `4.17.2` · CVSS 6.5 Medium · Not analysed yet · Published 13 May 2022 · Tags: Hard-coded credentials
- [TeamPass Storing Passwords in a Recoverable Format vulnerability](https://agentprime.io/advisories/GHSA-q9qr-h33g-fw3j.md)
  `GHSA-q9qr-h33g-fw3j`, `CVE-2019-1000001`, `PKSA-hrns-yqzq-5rfv` · Packagist `nilsteampassnet/teampass`: affected `<=2.1.27`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 May 2022 · Tags: Hard-coded credentials
- [Jenkins Artifactory Plugin stored old directly entered credentials unencrypted on disk](https://agentprime.io/advisories/GHSA-cvh8-9j4x-5v4j.md)
  `GHSA-cvh8-9j4x-5v4j`, `CVE-2018-1000424` · Maven `org.jenkins-ci.plugins:artifactory`: affected `<2.16.2`, fixed in `2.16.2` · CVSS 7.8 High · Not analysed yet · Published 13 May 2022 · Tags: Hard-coded credentials
- [Jenkins Crowd 2 Integration Plugin stored credentials in plain text](https://agentprime.io/advisories/GHSA-cg6q-gp23-vwx8.md)
  `GHSA-cg6q-gp23-vwx8`, `CVE-2018-1000423` · Maven `org.jenkins-ci.plugins:crowd2`: affected `<2.0.1`, fixed in `2.0.1` · CVSS 7.8 High · Not analysed yet · Published 13 May 2022 · Tags: Hard-coded credentials
- [Jenkins SonarQube Scanner Plugin stored server authentication token in plain text](https://agentprime.io/advisories/GHSA-3ccq-gccx-pm7j.md)
  `GHSA-3ccq-gccx-pm7j`, `CVE-2018-1000425` · Maven `org.jenkins-ci.plugins:sonar`: affected `<2.8.1`, fixed in `2.8.1` · CVSS 7.8 High · Not analysed yet · Published 13 May 2022 · Tags: Hard-coded credentials
- [Jenkins AppDynamics Dashboard Plugin has insufficiently protected credentials](https://agentprime.io/advisories/GHSA-mmqx-g78c-hvfj.md)
  `GHSA-mmqx-g78c-hvfj`, `CVE-2019-1003039` · Maven `org.jenkins-ci.plugins:appdynamics-dashboard`: affected `<1.0.15`, fixed in `1.0.15` · CVSS 4.3 Medium · Not analysed yet · Published 13 May 2022 · Tags: Hard-coded credentials
- [ECS Publisher Plugin stored and displayed API token in plain text](https://agentprime.io/advisories/GHSA-ffj8-w4rj-vr7v.md)
  `GHSA-ffj8-w4rj-vr7v`, `CVE-2019-1003045` · Maven `de.eacg:ecs-publisher`: affected `<1.0.1`, fixed in `1.0.1` · CVSS 6.5 Medium · Not analysed yet · Published 13 May 2022 · Tags: Hard-coded credentials
- [Jenkins Repository Connector Plugin has insufficiently protected credentials](https://agentprime.io/advisories/GHSA-99jc-v8pq-6qm4.md)
  `GHSA-99jc-v8pq-6qm4`, `CVE-2019-1003038` · Maven `org.jenkins-ci.plugins:repository-connector`: affected `<1.2.5`, fixed in `1.2.5` · CVSS 3.3 Low · Not analysed yet · Published 13 May 2022 · Tags: Hard-coded credentials
- [Jenkins Jabber Server Plugin stores credentials in plain text](https://agentprime.io/advisories/GHSA-cc7j-xx7q-fr34.md)
  `GHSA-cc7j-xx7q-fr34`, `CVE-2019-10288` · Maven `de.e-nexus:jabber-server-plugin`: affected `<=1.9`, no fixed version yet · CVSS 3.3 Low · Not analysed yet · Published 13 May 2022 · Tags: Hard-coded credentials
- [Jenkins youtrack-plugin Plugin stored credentials in plain text](https://agentprime.io/advisories/GHSA-c7p6-x2p3-3wph.md)
  `GHSA-c7p6-x2p3-3wph`, `CVE-2019-10287` · Maven `org.jenkins-ci.plugins:youtrack-plugin`: affected `<0.7.2`, fixed in `0.7.2` · CVSS 3.3 Low · Not analysed yet · Published 13 May 2022 · Tags: Hard-coded credentials
- [Jenkins Diawi Upload Plugin stores credentials in plain text](https://agentprime.io/advisories/GHSA-ph9f-h462-j5jg.md)
  `GHSA-ph9f-h462-j5jg`, `CVE-2019-10284` · Maven `org.jenkins-ci.plugins:diawi-upload`: affected `<=1.4`, no fixed version yet · CVSS 4.3 Medium · Not analysed yet · Published 13 May 2022 · Tags: Hard-coded credentials
- [Jenkins mabl Plugin stores credentials in plain text](https://agentprime.io/advisories/GHSA-hmf2-prm5-rvxm.md)
  `GHSA-hmf2-prm5-rvxm`, `CVE-2019-10283` · Maven `com.mabl.integration.jenkins:mabl-integration`: affected `<0.0.13`, fixed in `0.0.13` · CVSS 4.3 Medium · Not analysed yet · Published 13 May 2022 · Tags: Hard-coded credentials
- [Jenkins DeployHub Plugin stores credentials in plain text](https://agentprime.io/advisories/GHSA-9m3c-xfhf-53mh.md)
  `GHSA-9m3c-xfhf-53mh`, `CVE-2019-10286` · Maven `com.openmake:deployhub`: affected `<8.0.14`, fixed in `8.0.14` · CVSS 4.3 Medium · Not analysed yet · Published 13 May 2022 · Tags: Hard-coded credentials
- [Jenkins Minio Storage Plugin stores credentials in plain text](https://agentprime.io/advisories/GHSA-55f8-m8w5-fmq8.md)
  `GHSA-55f8-m8w5-fmq8`, `CVE-2019-10285` · Maven `org.jenkins-ci.plugins:minio-storage`: affected `<=0.0.3`, no fixed version yet · CVSS 3.3 Low · Not analysed yet · Published 13 May 2022 · Tags: Hard-coded credentials
- [Jenkins Koji Plugin stores credentials in plain text](https://agentprime.io/advisories/GHSA-x464-r7f4-gj3m.md)
  `GHSA-x464-r7f4-gj3m`, `CVE-2019-10298` · Maven `org.jenkins-ci.plugins:koji`: affected `<=0.3`, no fixed version yet · CVSS 3.3 Low · Not analysed yet · Published 13 May 2022 · Tags: Hard-coded credentials
- [Jenkins Netsparker Enterprise Scan Plugin stored credentials in plain text](https://agentprime.io/advisories/GHSA-m7q8-8g56-m78w.md)
  `GHSA-m7q8-8g56-m78w`, `CVE-2019-10291` · Maven `org.jenkins-ci.plugins:netsparker-cloud-scan`: affected `<1.1.6`, fixed in `1.1.6` · CVSS 3.3 Low · Not analysed yet · Published 13 May 2022 · Tags: Hard-coded credentials
- [Jenkins Sametime Plugin stores credentials in plain text](https://agentprime.io/advisories/GHSA-jvr5-r663-qxgw.md)
  `GHSA-jvr5-r663-qxgw`, `CVE-2019-10297` · Maven `org.jenkins-ci.plugins:sametime`: affected `<=0.4`, no fixed version yet · CVSS 3.3 Low · Not analysed yet · Published 13 May 2022 · Tags: Hard-coded credentials
- [Jenkins CloudCoreo DeployTime Plugin stores credentials in plain text](https://agentprime.io/advisories/GHSA-7hf6-hggp-vvp9.md)
  `GHSA-7hf6-hggp-vvp9`, `CVE-2019-10299` · Maven `com.cloudcoreo.plugins:cloudcoreo-deploytime`: affected `<=0.2.3`, no fixed version yet · CVSS 3.3 Low · Not analysed yet · Published 13 May 2022 · Tags: Hard-coded credentials
- [Jenkins Serena SRA Deploy Plugin stores credentials in plain text](https://agentprime.io/advisories/GHSA-rwrx-hrf2-v577.md)
  `GHSA-rwrx-hrf2-v577`, `CVE-2019-10296` · Maven `com.urbancode.ds.jenkins.plugins:sra-deploy`: affected `<=1.4.2.4`, no fixed version yet · CVSS 3.3 Low · Not analysed yet · Published 13 May 2022 · Tags: Hard-coded credentials
- [Jenkins crittercism-dsym Plugin stores API key in plain text](https://agentprime.io/advisories/GHSA-pxgr-rc8g-pj7r.md)
  `GHSA-pxgr-rc8g-pj7r`, `CVE-2019-10295` · Maven `org.jenkins-ci.plugins:crittercism-dsym`: affected `<=1.1`, no fixed version yet · CVSS 4.3 Medium · Not analysed yet · Published 13 May 2022 · Tags: Hard-coded credentials
- [Jenkins StarTeam Plugin stores credentials in plain text](https://agentprime.io/advisories/GHSA-gvhp-v4m2-3rwf.md)
  `GHSA-gvhp-v4m2-3rwf`, `CVE-2019-10277` · Maven `hudson.plugins:starteam`: affected `<=0.6.13`, no fixed version yet · CVSS 8.8 High · Not analysed yet · Published 13 May 2022 · Tags: Hard-coded credentials
- [Jenkins Klaros-Testmanagement Plugin stores credentials in plain text](https://agentprime.io/advisories/GHSA-cr98-64h9-g8cg.md)
  `GHSA-cr98-64h9-g8cg`, `CVE-2019-10282` · Maven `hudson.plugins.klaros:klaros-testmanagement`: affected `<2.1.0`, fixed in `2.1.0` · CVSS 4.3 Medium · Not analysed yet · Published 13 May 2022 · Tags: Hard-coded credentials
- [Jenkins Relution Enterprise Appstore Publisher Plugin stores credentials in plain text](https://agentprime.io/advisories/GHSA-9fpq-v2p3-w63j.md)
  `GHSA-9fpq-v2p3-w63j`, `CVE-2019-10281` · Maven `org.jenkins-ci.plugins:relution-publisher`: affected `<=1.24`, no fixed version yet · CVSS 3.3 Low · Not analysed yet · Published 13 May 2022 · Tags: Hard-coded credentials
- [Jenkins Kmap Plugin stores credentials in plain text](https://agentprime.io/advisories/GHSA-746x-xxrx-23jp.md)
  `GHSA-746x-xxrx-23jp`, `CVE-2019-10294` · Maven `org.jenkins-ci.plugins:kmap-jenkins`: affected `=1.6`, no fixed version yet · CVSS 8.8 High · Not analysed yet · Published 13 May 2022 · Tags: Hard-coded credentials
- [Jenkins Assembla Auth Plugin stores credentials in plain text](https://agentprime.io/advisories/GHSA-wmq3-24jm-m8xh.md)
  `GHSA-wmq3-24jm-m8xh`, `CVE-2019-10280` · Maven `org.jenkins-ci.plugins:assembla-auth`: affected `<1.13`, fixed in `1.13` · CVSS 8.8 High · Not analysed yet · Published 13 May 2022 · Tags: Hard-coded credentials
- [Moodle Temporary Passwords are Brute Force-able](https://agentprime.io/advisories/GHSA-9v64-447r-wch6.md)
  `GHSA-9v64-447r-wch6`, `CVE-2014-7845`, `PKSA-77dp-vfrk-4h6v` · Packagist `moodle/moodle`: affected `>=2.5.0, <2.5.9 || >=2.6.0, <2.6.6 || >=2.7.0, <2.7.3`, fixed in `2.5.9`, `2.6.6`, `2.7.3` · No CVSS score · Not analysed yet · Published 13 May 2022 · Tags: Hard-coded credentials
- [Hard-coded password in InHand Networks InRouter302](https://agentprime.io/advisories/CVE-2022-27172.md)
  `CVE-2022-27172` · CVE record: InHand Networks InRouter302 · CVSS 4.3 Medium · Not analysed yet · Published 12 May 2022 · Tags: Hard-coded credentials
- [Hard-coded cryptographic key in InHand Networks InRouter302](https://agentprime.io/advisories/CVE-2022-26020.md)
  `CVE-2022-26020` · CVE record: InHand Networks InRouter302 · CVSS 6.3 Medium · Not analysed yet · Published 12 May 2022 · Tags: Hard-coded credentials
- [Exposure of repository credentials to external third-party sources in Rancher](https://agentprime.io/advisories/GHSA-4fc7-hc63-7fjg.md)
  `GHSA-4fc7-hc63-7fjg`, `CVE-2021-36778` · Go `github.com/rancher/rancher`: affected `>=2.5.0, <2.5.12 || >=2.6.0, <2.6.3`, fixed in `2.5.12`, `2.6.3` · CVSS 7.3 High · Not analysed yet · Published 2 May 2022 · Tags: Information disclosure, Hard-coded credentials, Broken access control
- [Bender Charge Controller: Hardcoded Credentials in Charge Controller](https://agentprime.io/advisories/CVE-2021-34601.md)
  `CVE-2021-34601` · CVE record: Bender / ebee CC612 and 3 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Apr 2022 · Tags: Hard-coded credentials
- [Apache Doris, prior to 1.0.0, used a hardcoded key and IV to initialize the cipher used for ldap password, which may lead to information disclosure.](https://agentprime.io/advisories/GHSA-98j2-hfxp-8h8r.md)
  `GHSA-98j2-hfxp-8h8r`, `CVE-2022-23942`, `PYSEC-2022-43150` · PyPI `pydoris`: affected `<1.0.0`, fixed in `1.0.0` · CVSS 7.5 High · Not analysed yet · Published 26 Apr 2022 · Tags: Hard-coded credentials
- [ASUS WebStorage - Use of Hard-coded Credentials](https://agentprime.io/advisories/CVE-2022-26672.md)
  `CVE-2022-26672` · CVE record: ASUS WebStorage · CVSS 7.3 High · Not analysed yet · Published 22 Apr 2022 · Tags: Hard-coded credentials
- [Insufficiently protected credentials in Dell Repository Manager (DRM)](https://agentprime.io/advisories/CVE-2022-26856.md)
  `CVE-2022-26856` · CVE record: Dell Dell Repository Manager (DRM) · CVSS 8.2 High · Not analysed yet · Published 21 Apr 2022 · Tags: Hard-coded credentials
- [Cisco Umbrella Virtual Appliance Static SSH Host Key Vulnerability](https://agentprime.io/advisories/CVE-2022-20773.md)
  `CVE-2022-20773` · CVE record: Cisco Cisco Umbrella Insights Virtual Appliance · CVSS 7.5 High · Not analysed yet · Published 21 Apr 2022 · Tags: Hard-coded credentials
- [ICSA-22-104-03 Red Lion DA50N](https://agentprime.io/advisories/CVE-2022-1039.md)
  `CVE-2022-1039` · CVE record: Red Lion DA50N · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Apr 2022 · Tags: Hard-coded credentials
- [ICSA-22-104-03 Red Lion DA50N](https://agentprime.io/advisories/CVE-2022-27179.md)
  `CVE-2022-27179` · CVE record: Red Lion DA50N · CVSS 4.6 Medium · Not analysed yet · Published 20 Apr 2022 · Tags: Hard-coded credentials
- [Databasir 1.01 has Use of Hard-coded Cryptographic Key vulnerability.](https://agentprime.io/advisories/CVE-2022-24860.md)
  `CVE-2022-24860` · CVE record: vran-dev databasir · CVSS 7.4 High · Not analysed yet · Published 19 Apr 2022 · Tags: Hard-coded credentials
- [Insufficiently protected credentials in ansible](https://agentprime.io/advisories/CVE-2021-3681.md)
  `CVE-2021-3681` · CVE record: ansible · No CVSS score · Not analysed yet · Published 18 Apr 2022 · Tags: Hard-coded credentials
- [Zoho ManageEngine ADSelfService Plus before build 6122 allows a remote authenticated administrator to execute arbitrary operating OS commands as SYSTEM via the policy custom script feature.](https://agentprime.io/advisories/CVE-2022-28810.md)
  `CVE-2022-28810` · CVE record · CVSS 6.8 Medium · Critical (KEV) · In CISA KEV · EPSS 0.71 · Not analysed yet · Published 18 Apr 2022 · Tags: Hard-coded credentials
- [B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus](https://agentprime.io/advisories/CVE-2020-25168.md)
  `CVE-2020-25168` · CVE record: B. Braun Melsungen AG SpaceCom and 2 more · CVSS 3.3 Low · Not analysed yet · Published 14 Apr 2022 · Tags: Hard-coded credentials
- [Hard-coded credentials in Swift Sensors Gateway](https://agentprime.io/advisories/CVE-2021-40422.md)
  `CVE-2021-40422` · CVE record: Swift Sensors Swift Sensors Gateway · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Apr 2022 · Tags: Hard-coded credentials
- [Hard-coded credentials in Moxa MXView Series](https://agentprime.io/advisories/CVE-2021-40390.md)
  `CVE-2021-40390` · CVE record: Moxa MXView Series · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Apr 2022 · Tags: Hard-coded credentials
- [Hard-coded credentials in Citirx Citrix SD-WAN](https://agentprime.io/advisories/CVE-2022-27506.md)
  `CVE-2022-27506` · CVE record: Citirx Citrix SD-WAN · No CVSS score · Not analysed yet · Published 13 Apr 2022 · Tags: Hard-coded credentials
- [Private key stored in plain text by Jenkins Google Compute Engine Plugin](https://agentprime.io/advisories/GHSA-vhxq-9mpv-gj87.md)
  `GHSA-vhxq-9mpv-gj87`, `CVE-2022-29052` · Maven `org.jenkins-ci.plugins:google-compute-engine`: affected `<4.3.9`, fixed in `4.3.9` · CVSS 4.3 Medium · Not analysed yet · Published 13 Apr 2022 · Tags: Hard-coded credentials
- [Hard-coded credentials in Dell PowerScale OneFS](https://agentprime.io/advisories/CVE-2022-22560.md)
  `CVE-2022-22560` · CVE record: Dell PowerScale OneFS · CVSS 7.1 High · Not analysed yet · Published 12 Apr 2022 · Tags: Hard-coded credentials
- [TAIWAN SECOM CO., LTD., a xDoor Access Control and Personnel Attendance Management system - Hard-coded Credentials](https://agentprime.io/advisories/CVE-2022-26671.md)
  `CVE-2022-26671` · CVE record: TAIWAN SECOM CO., LTD., Personnel Attendance Management system · CVSS 7.3 High · Not analysed yet · Published 7 Apr 2022 · Tags: Hard-coded credentials
- [Weak Password Requirements in weseek/growi](https://agentprime.io/advisories/CVE-2022-1236.md)
  `CVE-2022-1236` · CVE record: weseek weseek/growi · CVSS 4.3 Medium · Not analysed yet · Published 5 Apr 2022 · Tags: Hard-coded credentials
- [Kyocera Net View Address Book Exposure](https://agentprime.io/advisories/CVE-2022-1026.md)
  `CVE-2022-1026` · CVE record: Kyocera Multifunction Printer Net Viewer · CVSS 8.6 High · Critical (CVSS 7+ and EPSS) · EPSS 0.15 · Not analysed yet · Published 4 Apr 2022 · Tags: Hard-coded credentials
- [Philips Vue PACS Insufficiently Protected Credentials](https://agentprime.io/advisories/CVE-2021-33024.md)
  `CVE-2021-33024` · CVE record: Philips Vue PACS and 3 more · CVSS 3.7 Low · Not analysed yet · Published 1 Apr 2022 · Tags: Hard-coded credentials
- [Password stored in plain text by Jenkins Proxmox Plugin](https://agentprime.io/advisories/GHSA-w97x-j6rg-55v5.md)
  `GHSA-w97x-j6rg-55v5`, `CVE-2022-28141` · Maven `org.jenkins-ci.plugins:proxmox`: affected `<0.6.0`, fixed in `0.6.0` · CVSS 6.5 Medium · Not analysed yet · Published 30 Mar 2022 · Tags: Hard-coded credentials
- [Plaintext storage in Jenkins instant-messaging Plugin](https://agentprime.io/advisories/GHSA-hpm9-fx8v-w45v.md)
  `GHSA-hpm9-fx8v-w45v`, `CVE-2022-28135` · Maven `org.jvnet.hudson.plugins:instant-messaging`: affected `<1.42`, fixed in `1.42` · CVSS 6.5 Medium · Not analysed yet · Published 30 Mar 2022 · Tags: Hard-coded credentials, CWE-256
- [GE UR family hardcoded credentials](https://agentprime.io/advisories/CVE-2021-27430.md)
  `CVE-2021-27430` · CVE record: GE UR bootloader binary · CVSS 8.4 High · Not analysed yet · Published 23 Mar 2022 · Tags: Hard-coded credentials
- [ePO password change vulnerability](https://agentprime.io/advisories/CVE-2022-0862.md)
  `CVE-2022-0862` · CVE record: McAfee,LLC McAfee ePolicy Orchestrator (ePO) · CVSS 3.1 Low · Not analysed yet · Published 23 Mar 2022 · Tags: Hard-coded credentials
- [ePO database restoration vulnerability](https://agentprime.io/advisories/CVE-2022-0859.md)
  `CVE-2022-0859` · CVE record: McAfee,LLC McAfee ePolicy Orchestrator (ePO) · CVSS 6.5 Medium · Not analysed yet · Published 23 Mar 2022 · Tags: Hard-coded credentials

Newest: <https://agentprime.io/advisories/tag/hard-coded-credentials.md>
Older: <https://agentprime.io/advisories/tag/hard-coded-credentials.md?cursor=WyIyMDIyLTAzLTIzVDE0OjIwOjEyLjAwMDAwMFoiLCJDVkUtMjAyMi0wODU5Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=hard-coded-credentials&cursor=WyIyMDIyLTA1LTEzVDAxOjQ4OjMwLjAwMDAwMFoiLCJHSFNBLTM4eG0teGh2ai1xMnFmIl0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/hard-coded-credentials/?cursor=WyIyMDIyLTA1LTEzVDAxOjQ4OjMwLjAwMDAwMFoiLCJHSFNBLTM4eG0teGh2ai1xMnFmIl0>. Everything for agents: <https://agentprime.io/llms.txt>.