Hard-coded credentials.

IBM CICS Transaction Gateway for Multiplatforms information disclosure

• IBM CICS Transaction Gateway for Multiplatforms
• Hard-coded credentials

Hard-coded password in NEC Corporation WG1800HP4 and others

• NEC Corporation WG1800HP4
• NEC Corporation WG1200HS3
• Hard-coded credentials

Insufficiently protected credentials in Sangoma Technologies cg6kwin2k.sys

• Sangoma Technologies cg6kwin2k.sys
• Hard-coded credentials

Weak credentials in KDDI CORPORATION HGW BL1500HM

• KDDI CORPORATION HGW BL1500HM
• Hard-coded credentials

Weak credentials in KDDI CORPORATION HGW BL1500HM

• KDDI CORPORATION HGW BL1500HM
• Hard-coded credentials

Use of Hard-coded Credentials in Kiloview NDI N series products API middleware

• Kiloview NDI
• Hard-coded credentials

Chirp Systems Chirp Access Use of Hard-coded Password

• Chirp Systems Chirp Access
• Hard-coded credentials

Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-259: Use of Hard-coded Password

• Unitronics Unistream Unilogic
• Hard-coded credentials

IBM Host Access Transformation Services information disclosure

• IBM Host Access Transformation Services
• Hard-coded credentials

Hard-coded cryptographic key in OpenText™ Exceed Turbo X

• OpenText™ Exceed Turbo X
• Hard-coded credentials

Authentication Bypass Because of Hardcoded JWT Secret in your_spotify

• Yooooomi your_spotify
• Hard-coded credentials

Hustle <= 7.8.3 - Sensitive Information Exposure via Exposed Hubspot API Keys

• wpmudev Hustle – Email Marketing, Lead Generation, Optins, Popups
• Hard-coded credentials

Intumit SmartRobot - Use of Hard-coded Cryptographic Key

• Intumit SmartRobot
• Hard-coded credentials

Arris SBG6580 devices have predictable default WPA2 security passwords that could lead to unauthorized remote access.

• Hard-coded credentials

Go SDK for CloudEvents's use of WithRoundTripper to create a Client leaks credentials

• Hard-coded credentials

<2.15.2 · fixed in 2.15.2

Hard-coded credentials in AiLux imx6 bundle

• AiLux imx6 bundle
• Hard-coded credentials

Insufficiently protected credentials in Gallagher Command Centre Server

• Gallagher Command Centre Server
• Hard-coded credentials

The Elink Smart eSmartCam (com.cn.dq.ipc) application 2.1.5 for Android contains hardcoded AES encryption keys that can be extracted from a binary file.

• Hard-coded credentials

IBM QRadar Suite information dislosure

• IBM QRadar Suite Products
• IBM Cloud Pak for Security
• Hard-coded credentials

IBM Engineering Requirements Management information disclosure

• IBM Engineering Requirements Management
• Hard-coded credentials

Microsoft Edge for Android (Chromium-based) Information Disclosure Vulnerability

• Microsoft Edge for Android
• Hard-coded credentials

An issue was discovered in Couchbase Server before 7.2.4. ns_server admin credentials are leaked in encoded form in the diag.log file.

• Hard-coded credentials

osuuu LightPicture TokenVerify.php handle hard-coded key

• osuuu LightPicture
• Hard-coded credentials

@nfid/embed has compromised private key due to @dfinity/auth-client producing insecure session keys

• Hard-coded credentials
• Weak cryptography or TLS

>=0.10.0, <0.10.1-alpha.6 · fixed in 0.10.1-alpha.6

An issue was discovered in Yealink Configuration Encrypt Tool (AES version) and Yealink Configuration Encrypt Tool (RSA version before 1.2).

• Hard-coded credentials

agent-js: Insecure Key Generation in `Ed25519KeyIdentity.generate`

• Hard-coded credentials
• Weak cryptography or TLS

>=0.20.0-beta.0, <1.0.1 · fixed in 1.0.1

Totolink X6000R shadow hard-coded credentials

• Totolink X6000R
• Hard-coded credentials

Local Access to Sensitive Data in Brivo ACS100 and ACS300

• Brivo ACS100, ACS300
• Broken access control
• Hard-coded credentials

Weak MySQL database root password in LaborOfficeFree

• LaborOfficeFree
• Hard-coded credentials

Weak MySQL database root password in LaborOfficeFree

• LaborOfficeFree
• Hard-coded credentials

Encrypted database credentials in LaborOfficeFree

• LaborOfficeFree
• Hard-coded credentials

Yealink Config Encrypt Tool add RSA before 1.2 has a built-in RSA key pair, and thus there is a risk of decryption by an adversary.

• Hard-coded credentials

Hardcoded Credentals in SoliClub Mobile App

• Utarit Information Technologies SoliPay Mobile App
• Hard-coded credentials

Hard-coded credentials in iZZi connect application

• INPRAX iZZi connect
• Hard-coded credentials

Hardcoded password in Comarch ERP XL

• Comarch ERP XL
• Hard-coded credentials

Shared Key in Comarch ERP XL

• Comarch ERP XL
• Hard-coded credentials

Insufficiently protected credentials in Schneider Electric EcoStruxure Control Expert and others

• Schneider Electric EcoStruxure Control Expert
• Schneider Electric EcoStruxure Process Expert
• Hard-coded credentials

Hard-coded credentials in Schneider Electric EcoStruxure Control Expert and others

• Schneider Electric EcoStruxure Control Expert
• Schneider Electric EcoStruxure Process Expert
• Hard-coded credentials

BIG-IP Next CNF & SPK vulnerability

• F5 BIG-IP Next SPK
• F5 BIG-IP Next CNF
• Hard-coded credentials

Insufficiently protected credentials in Intel(R) Server Product OpenBMC firmware

• Intel(R) Server Product OpenBMC firmware
• Hard-coded credentials

Hard-coded credentials in Siemens Location Intelligence Perpetual Large and others

• Siemens Location Intelligence Perpetual Large
• Siemens Location Intelligence Perpetual Medium
• Hard-coded credentials

IBM CICS TX session fixation

• IBM CICS TX Standard
• IBM CICS TX Advanced
• Hard-coded credentials

IBM DataStage on Cloud Pak for Data information disclosure

• IBM DataStage on Cloud Pak for Data
• Hard-coded credentials

IBM Storage Defender - Resiliency Service information disclosure

• IBM Storage Defender - Resiliency Service
• Hard-coded credentials

Apache Solr can leak certain passwords due to System Property redaction logic inconsistencies

• Hard-coded credentials

>=6.0.0, <8.11.3 || >=9.0.0, <9.3.0 · fixed in 8.11.3, 9.3.0

IBM Security Access Manager Container information disclosure

• IBM Security Verify Access Appliance
• IBM Security Verify Access Docker
• Hard-coded credentials

An issue in SCHUHFRIED v.8.22.00 allows remote attacker to obtain the database password via crafted curl command.

• Hard-coded credentials

Juanpao JPShop API params.php hard-coded key

• Juanpao JPShop
• Hard-coded credentials

Allegro AI ClearML Stores Credentials in Plaintext in MongoDB Instance

• Information disclosure
• Hard-coded credentials

<=1.14.2 · no fixed version yet

D-LINK Go-RT-AC750 GORTAC750_A1_FW_v101b03 has a hardcoded password for the Alphanetworks account, which allows remote attackers to obtain root access via a telnet session.

• Hard-coded credentials

Use of Hard-Coded Credentials in Rapid SCADA

• Rapid Software LLC Rapid SCADA
• Hard-coded credentials

MachineSense FeverWarn Use of Hard-coded Credentials

• MachineSense FeverWarn
• Hard-coded credentials

Use of Hard-coded Credentials in Gessler GmbH WEB-MASTER

• Gessler GmbH WEB-MASTER
• Hard-coded credentials

Weak password requirement vulnerability in Lamassu Bitcoin ATM Douro machines

• Lamassu Bitcoin ATM Douro machines
• Hard-coded credentials

TOTOLINK A8000RU v7.1cu.643_B20200521 was discovered to contain a hardcoded password for root stored in /etc/shadow.

• Hard-coded credentials

Apache Kylin has Insufficiently Protected Credentials

• Hard-coded credentials

>=2.0.0, <4.0.4 · fixed in 4.0.4

DoraCMS 2.1.8 is vulnerable to Use of Hard-coded Cryptographic Key.

• Hard-coded credentials

Encryption key derived from static host information

• Synaptics Fingerprint Driver
• Hard-coded credentials

IBM Merge Healthcare eFilm Workstation Hardcoded Credentials

• IBM Merge Healthcare eFilm Workstation
• Hard-coded credentials

Hard-coded credentials in Spoon Radio Japan Inc. Android Spoon application

• Spoon Radio Japan Inc. Android Spoon application
• Hard-coded credentials