Vulnerabilities > Insufficiently Protected Credentials

DATE CVE VULNERABILITY TITLE RISK
2021-06-09 CVE-2020-15381 Insufficiently Protected Credentials vulnerability in Broadcom Sannav 2.1.0
Brocade SANnav before version 2.1.1 contains an Improper Authentication vulnerability that allows cleartext transmission of authentication credentials of the jmx server.
network
low complexity
broadcom CWE-522
7.5
2021-06-08 CVE-2020-26515 Insufficiently Protected Credentials vulnerability in Intland Codebeamer 10.0.0/10.0.1/10.1.0
An insufficiently protected credentials issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4.
network
low complexity
intland CWE-522
7.5
2021-06-04 CVE-2020-29321 Insufficiently Protected Credentials vulnerability in Dlink Dir-868L Firmware 3.01
The D-Link router DIR-868L 3.01 is vulnerable to credentials disclosure in telnet service through decompilation of firmware, that allows an unauthenticated attacker to gain access to the firmware and to extract sensitive data.
network
low complexity
dlink CWE-522
7.5
2021-06-04 CVE-2020-29322 Insufficiently Protected Credentials vulnerability in Dlink Dir-880L Firmware 1.07
The D-Link router DIR-880L 1.07 is vulnerable to credentials disclosure in telnet service through decompilation of firmware, that allows an unauthenticated attacker to gain access to the firmware and to extract sensitive data.
network
low complexity
dlink CWE-522
7.5
2021-06-04 CVE-2020-29323 Insufficiently Protected Credentials vulnerability in Dlink Dir-885L-Mfc Firmware 1.15B02/1.21B05
The D-link router DIR-885L-MFC 1.15b02, v1.21b05 is vulnerable to credentials disclosure in telnet service through decompilation of firmware, that allows an unauthenticated attacker to gain access to the firmware and to extract sensitive data.
network
low complexity
dlink CWE-522
7.5
2021-06-01 CVE-2019-4723 Insufficiently Protected Credentials vulnerability in multiple products
IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain credentials from a user's browser via incorrect autocomplete settings in New Data Server Connection page.
network
low complexity
ibm netapp CWE-522
7.5
2021-06-01 CVE-2019-4724 Insufficiently Protected Credentials vulnerability in multiple products
IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain credentials from a user's browser via incorrect autocomplete settings in New Content Backup page.
network
low complexity
ibm netapp CWE-522
7.5
2021-06-01 CVE-2021-23019 Insufficiently Protected Credentials vulnerability in F5 Nginx Controller
The NGINX Controller 2.0.0 thru 2.9.0 and 3.x before 3.15.0 Administrator password may be exposed in the systemd.txt file that is included in the NGINX support package.
local
low complexity
f5 CWE-522
7.8
2021-05-27 CVE-2020-27831 Insufficiently Protected Credentials vulnerability in Redhat Quay
A flaw was found in Red Hat Quay, where it does not properly protect the authorization token when authorizing email addresses for repository email notifications.
network
low complexity
redhat CWE-522
4.3
2021-05-26 CVE-2019-25030 Insufficiently Protected Credentials vulnerability in Versa-Networks products
In Versa Director, Versa Analytics and VOS, Passwords are not hashed using an adaptive cryptographic hash function or key derivation function prior to storage.
local
low complexity
versa-networks CWE-522
5.5