Weakness (CWE)
CWE-257: Storing Passwords in a Recoverable Format
The storage of passwords in a recoverable format makes them subject to password reuse attacks by malicious users. In fact, it should be noted that recoverable encrypted passwords provide no significant benefit over plaintext passwords since they are subject not only to reuse by malicious attackers but also by malicious insiders. If a system administrator can recover a password directly, or use a brute force search on the available information, the administrator can use the password on other accounts.
How to prevent it (1 mitigation)
-
Architecture and Design
Use strong, non-reversible encryption to protect stored passwords.
Source: MITRE CWE-257
69 results · Feed
-
Medium 6.4
LoadMaster Reversible Password Encryption Algorithm
Use of reversible password encryption algorithm allows attackers to decrypt passwords. Sensitive information can be easily unencrypted by the attacker, stolen credentials can be used for arbitrary actions to corrupt the system.
-
Medium 6.1
Claris International has successfully resolved an issue of potentially exposing password information to front-end websi…
-
High 7.5
Unitronics Vision Standard Unauthenticated Password Retrieval
Unitronics Vision Standard line of controllers allow the Information Mode password to be retrieved without authentication.
-
Medium 6.8
IBM OpenPages with Watson information disclosure
IBM OpenPages with Watson 8.3 and 9.0 could provide weaker than expected security in a OpenPages environment using Native authentication. If OpenPages is using Native authentication an attacker with access to the OpenPages database could through a series of s…
-
Medium 5.1
IBM Security Access Manager Container information disclosure
IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.6.1) temporarily stores sensitive information in files that could be accessed by a local user. IBM X-Force ID: 254…
-
High 7.5
Incorrect Implementation of Authentication Algorithm Vulnerability
A vulnerability has been identified in NPort 6000 Series, making the authentication mechanism vulnerable. This vulnerability arises from the incorrect implementation of sensitive information protection, potentially allowing malicious users to gain unauthorize…
-
Medium 4.3
Hitachi Vantara Pentaho Business Analytics Server – Password Stored in a Recoverable Format
Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.5.0.0 and 9.3.0.4, including 8.3.x.x, saves passwords of the Hadoop Copy Files step in plaintext.
-
High 7.3
The Alaris Infusion Central software, versions 1.1 to 1.3.2, may contain a recoverable password after the installation.…
-
Medium 6.7
Storing Passwords in a Recoverable Format in pimcore/customer-data-framework
Storing Passwords in a Recoverable Format in GitHub repository pimcore/customer-data-framework prior to 3.3.10.
-
High 8.0
Storing Passwords in a Recoverable Format
A Storing Passwords in a Recoverable Format vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) database system could allow an authenticated attacker to retrieve passwords. See SEL Service Bulletin dated 2022-11…
-
Medium 6.5
Azure Machine Learning Compute Instance Information Disclosure Vulnerability
Azure Machine Learning Compute Instance Information Disclosure Vulnerability
-
High 8.0
A CWE-257: Storing Passwords in a Recoverable Format vulnerability exists that could result in unwanted access to a DCE…
-
High 7.8
Windows Credential Manager User Interface Elevation of Privilege Vulnerability
Windows Credential Manager User Interface Elevation of Privilege Vulnerability
-
Medium 5.7
Affected devices store the CLI user passwords encrypted in flash memory. Attackers with physical access to the device c…
-
High 7.8
cSRX Series: Storing Passwords in a Recoverable Format and software permissions issues allows a local attacker to elevate privileges
On cSRX Series devices software permission issues in the container filesystem and stored files combined with storing passwords in a recoverable format in Juniper Networks Junos OS allows a local, low-privileged attacker to elevate their permissions to take co…
-
High 8.1
ABB Ability TM Operations Data Management Zenon Zenon Log Server file access control
Storing Passwords in a Recoverable Format vulnerability in ABB Zenon 8.20 allows an attacker who successfully exploit the vulnerability may add or alter data points and corresponding attributes. Once such engineering data is used the data visualization will b…
-
Medium 6.2
ABB Ability TM Operations Data Management Zenon Zenon Log Server file access control
Storing Passwords in a Recoverable Format vulnerability in ABB Zenon 8.20 allows an attacker who successfully exploit the vulnerability may add more network clients that may monitor various activities of the Zenon.
-
Medium 6.5
User Credentials Stored in a Recoverable Format within Fidelis Network and Deception
User credentials stored in a recoverable format within Fidelis Network and Deception CommandPost. In the event that an attacker gains access to the CommandPost, these values could be decoded and used to login to the application. The vulnerability is present i…
-
Unscored —
ZOLL Defibrillator Dashboard, v prior to 2.2,The application allows users to store their passwords in a recoverable for…
-
Unscored —
Nextcloud Server prior to 20.0.0 stores passwords in a recoverable format even when external storage is not configured.
-
Medium 6.8
Junos Space: Shared secrets stored in recoverable format and directly exposed through the UI
The Junos Space Network Management Platform has been found to store shared secrets in a recoverable format that can be exposed through the UI. An attacker who is able to execute arbitrary code in the victim browser (for example via XSS) or access cached conte…
-
Unscored —
BIOTRONIK CardioMessenger II, The affected products use individual per-device credentials that are stored in a recovera…
-
Medium 6.1
ABB eSOMS: REDIS clear text credentials
The Redis data structure component used in ABB eSOMS versions 6.0 to 6.0.2 stores credentials in clear text. If an attacker has file system access, this can potentially compromise the credentials' confidentiality.
-
High 8.2
Dell EMC Integrated Data Protection Appliance versions prior to 2.3 contain a password storage vulnerability in the ACM…
-
Medium 6.5
Jenkins Credentials Binding Plugin Stores Passwords in a Recoverable Format
Jenkins Credentials Binding Plugin Jenkins 1.17 is affected by: CWE-257: Storing Passwords in a Recoverable Format. The impact is: Authenticated users can recover credentials. The component is: config-variables.jelly line #30 (passwordVariable). The attack ve…
-
Unscored —
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All Versions < V5.2.4)…
-
Low 3.1
Rapid7 InsightVM Stored Credential Exposure
Users with Site-level permissions can access files containing the username-encrypted passwords of Security Console Global Administrators and clear-text passwords for restoring backups, as well as the salt for those passwords. Valid credentials are required to…
-
Medium 4.9
Medtronic 2090 Carelink Programmer Storing Passwords in a Recoverable Format
Medtronic 2090 CareLink Programmer uses a per-product username and password that is stored in a recoverable format.
-
Unscored —
A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker wi…