CWE:

	Topic	Date	Author
Med.	3CX Phone System Cleartext Passwords	22.03.2022	Emanuel Duss
Med.	SAP Download Manager 2.1.142 Weak Encryption	11.03.2016	CORE

---

CVEMAP Search Results

CVE

Details

Description

2024-05-15

CVE-2024-32042

Updating...

The key used to encrypt passwords stored in the database can be found in the CyberPower PowerPanel application code, allowing the passwords to be recovered.

2024-01-19

CVE-2023-38738

Updating...

IBM OpenPages with Watson 8.3 and 9.0 could provide weaker than expected security in a OpenPages environment using Native authentication. If OpenPages is using Native authentication an attacker with access to the OpenPages database could through a series of specially crafted steps could exploit this weakness and gain unauthorized access to other OpenPages accounts. IBM X-Force ID: 262594.

2024-01-11

CVE-2023-31001

Updating...

IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.6.1) temporarily stores sensitive information in files that could be accessed by a local user. IBM X-Force ID: 254653.

2023-05-25

CVE-2023-2881

Updating...

Storing Passwords in a Recoverable Format in GitHub repository pimcore/customer-data-framework prior to 3.3.10.

2023-03-13

CVE-2023-0353

Updating...

Akuvox E11 uses a weak encryption algorithm for stored passwords and uses a hard-coded password for decryption which could allow the encrypted passwords to be decrypted from the configuration file.

2023-01-30

CVE-2022-32519

Updating...

A CWE-257: Storing Passwords in a Recoverable Format vulnerability exists that could result in unwanted access to a DCE instance when performed over a network by a malicious third-party. Affected Products: Data Center Expert (Versions prior to V7.9.0)

2021-06-16

Medium

CVE-2021-27485

Vendor: ZOLL Software: Defibrillato...

ZOLL Defibrillator Dashboard, v prior to 2.2,The application allows users to store their passwords in a recoverable format, which could allow an attacker to retrieve the credentials from the web browser.

 

---

Copyright 2024, cxsecurity.com