Hard-coded credentials.

Insufficiently protected credentials in Dell Networking OS10

• Dell Networking OS10
• Hard-coded credentials

Use of Hard-coded Credentials in UWP3.0 allows SuperUser authentication bypass in Car Park Server.

• Carlo Gavazzi UWP 3.0 Monitoring Gateway and Controller
• Carlo Gavazzi UWP 3.0 Monitoring Gateway and Controller – Security Enhanced
• Hard-coded credentials

Hard-coded credentials in Carlo Gavazzi UWP3.0 allows for authentication bypass and full control of the device

• Carlo Gavazzi UWP 3.0 Monitoring Gateway and Controller
• Carlo Gavazzi UWP 3.0 Monitoring Gateway and Controller – Security Enhanced
• Hard-coded credentials

Chipolo ONE Bluetooth tracker (2020) Chipolo iOS app version 4.13.0 is vulnerable to Incorrect Access Control.

• Hard-coded credentials

Contec FXA3200 version 1.13 and under were discovered to contain a hard coded hash password for root stored in the component /etc/shadow.

• Hard-coded credentials

Weak Password Requirements in ikus060/minarca

• ikus060/minarca
• Hard-coded credentials

Jenkins BigPanda Notifier Plugin stores BigPanda API key unencrypted

• Hard-coded credentials
• CWE-256

<=1.4.0 · no fixed version yet

API token stored in plain text by Jenkins CONS3RT Plugin

• Hard-coded credentials
• CWE-256

<=1.0.0 · no fixed version yet

Delta Electronics DIAEnergy Use of Hard-coded Credentials

• Delta Electronics DIAEnergy
• Hard-coded credentials

rdiffweb contains Weak Password Requirements

• Hard-coded credentials

>=2.4.1, <2.4.2 · fixed in 2.4.2

Contec Health CMS8000

• Contec Health CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor
• Hard-coded credentials

An insufficiently protected credential vulnerability affects HCL VersionVault Express

• HCL Software HCL VersionVault Express
• Hard-coded credentials

Le-yan Co., Ltd. Personnel and Salary Management System - Hard-coded password

• Le-yan Co., Ltd. Personnel and Salary Management System
• Hard-coded credentials

python-oslo-utils has improper password parsing

• Hard-coded credentials
• Information disclosure

<4.10.1 · fixed in 4.10.1

HCL iNotes is susceptible to a Broken Password Strength Checks vulnerability.

• HCL Software HCL iNotes
• Hard-coded credentials

Insufficiently protected credentials in Odyssey

• Odyssey
• Hard-coded credentials

RabbitMQ password stored in plain text by Jenkins CollabNet Plugins Plugin

• Hard-coded credentials
• CWE-256

<2.0.9 · fixed in 2.0.9

Improper masking of credentials Jenkins in Git Plugin

• Hard-coded credentials

<4.11.5 · fixed in 4.11.5

Missing password strength check in notrinos/notrinos-erp

• Hard-coded credentials

<0.7 · fixed in 0.7

Incorrect implementation of lockout feature in Keycloak

• Information disclosure
• Hard-coded credentials

<13.0.0 · fixed in 13.0.0

Use of Hard-coded Credentials in AgileConfig.Client

• Hard-coded credentials

<1.6.8 · fixed in 1.6.8

Insufficiently protected credentials in version

• version
• Hard-coded credentials

Insufficiently protected credentials in version

• version
• Hard-coded credentials

Insufficiently protected credentials in version

• version
• Hard-coded credentials

Insufficiently protected credentials in Intel(R) AMT and Intel(R) Standard Manageability

• Intel(R) AMT and Intel(R) Standard Manageability
• Hard-coded credentials

Insufficiently protected credentials in Intel(R) AMT and Intel(R) Standard Manageability

• Intel(R) AMT and Intel(R) Standard Manageability
• Hard-coded credentials

Hardcoded encryption key IV in Exago WebReportsApi.dll

• Device42 CMDB
• Hard-coded credentials

Insufficiently protected credentials in Airspan AirVelocity

• Airspan AirVelocity
• Hard-coded credentials

Insufficiently protected credentials in foreman-installer

• foreman-installer
• Hard-coded credentials

Hard-coded password in TCL LinkHub Mesh Wifi

• TCL LinkHub Mesh Wifi
• Hard-coded credentials

Raneto v0.17.0 employs weak password complexity requirements

• Hard-coded credentials

<0.17.1 · fixed in 0.17.1

ITPison OMICARD EDM - Use of Hard-coded Credentials

• ITPison OMICARD EDM
• Hard-coded credentials

Hard-coded credentials in Vinchin Backup and Recovery

• Vinchin Backup and Recovery
• Hard-coded credentials

Weak password requirements in Bosch BF-OS

• Bosch BF-OS
• Hard-coded credentials

HCL Commerce could allow a local attacker to obtain sensitive personal information (CVE-2021-27785)

• HCL Software HCL Commerce
• Hard-coded credentials

Ovarro TBox Use of Hard-coded Cryptographic Key

• Ovarro TBox
• Hard-coded credentials

Ovarro TBox Insufficiently Protected Credentials

• Ovarro TBox
• Hard-coded credentials

The Motorola ACE1000 RTU through 2022-05-02 ships with a hardcoded SSH private key and initialization scripts (such as /etc/init.d/sshd_service) only generate a new key if no private-key file exists.

• Hard-coded credentials

Hard-coded credentials in Atlassian Questions For Confluence

• Atlassian Questions For Confluence
• Hard-coded credentials

Insufficiently protected credentials in Anchore Inc. Anchore Enterprise and others

• Anchore Inc. Anchore Enterprise
• Anchore Inc. AnchoreCTL
• Hard-coded credentials

ICSA-22-200-01 MiCODUS MV720 GPS tracker Use of Hard-coded Credentials

• MiCODUS MV720
• Hard-coded credentials

HCL BigFix Web Reports authorized users may see sensitive information in clear text

• HCL Software HCL BigFix
• Hard-coded credentials

Protecting AWS credentials stored in plaintext on My Cloud Home

• Western Digital My Cloud Home
• Hard-coded credentials

Use of Hard-coded Credentials in Nacos

• Authentication bypass
• Hard-coded credentials

<=2.0.3 · no fixed version yet

Hard-coded credentials in OMRON Corporation Machine automation controller NJ series…

• OMRON Corporation Machine automation controller NJ series, Machine automation controller NX series, Automation software 'Sysmac Studio', and Programmable Terminal (PT) NA series
• Hard-coded credentials

Token stored in plain text by Jenkins Cisco Spark Plugin

• Hard-coded credentials

<=1.1.1 · no fixed version yet

Password stored in plain text by Jenkins RQM Plugin

• Hard-coded credentials
• CWE-256

<=2.8 · no fixed version yet

Plaintext Storage of a Password in Jenkins Elasticsearch Query Plugin

• Hard-coded credentials
• CWE-256

<=1.2 · no fixed version yet

Plaintext Storage of a Password in Jenkins Jigomerge Plugin

• Hard-coded credentials
• CWE-256

<=0.9 · no fixed version yet

Plaintext Storage of a Password in Jenkins Skype notifier Plugin

• Hard-coded credentials
• CWE-256

<=1.1.0 · no fixed version yet

Passwords stored in plain text by Jenkins hpe-network-virtualization plugin

• Hard-coded credentials
• CWE-256

=1.0 · no fixed version yet

Jenkins OpsGenie Plugin Plaintext Storage of a Password vulnerability

• Hard-coded credentials
• CWE-256

<=1.9 · no fixed version yet

Plaintext Storage of a Password in Jenkins Build Notifications Plugin

• Hard-coded credentials
• CWE-256

<=1.5.0 · no fixed version yet

Plaintext Storage of a Password in Jenkins RocketChat Notifier Plugin

• Hard-coded credentials
• CWE-256

<=1.5.2 · no fixed version yet

Jenkins Deployment Dashboard Plugin has Insufficiently Protected Credentials

• Hard-coded credentials
• Broken access control

<=1.0.10 · no fixed version yet

Plaintext Storage of a Password in Jenkins Deployment Dashboard Plugin

• Hard-coded credentials
• CWE-256

<=1.0.10 · no fixed version yet

PingID Windows Login prior to 2.8 does not properly set permissions on the Windows Registry entries used to store sensitive API keys under some circumstances

• Ping Identity PingID Windows Login
• Authentication bypass
• Hard-coded credentials

Hard-coded credentials in Yokogawa Electric Corporation STARDOM Controller

• Yokogawa Electric Corporation STARDOM Controller
• Hard-coded credentials

Secheron SEPCOS Control and Protection Relay

• Secheron SEPCOS Control and Protection Relay firmware package
• Hard-coded credentials

Secheron SEPCOS Control and Protection Relay

• Secheron SEPCOS Control and Protection Relay firmware package
• Hard-coded credentials