Weaknesses of type CWE-255

61 results

Erros na gestão de credenciais

É qualquer falha na forma como a aplicação armazena, transmite, valida ou revoga credenciais (senhas, tokens, chaves). Erros desse tipo permitem que um atacante roube, reutilize ou contorne autenticação sem privilégios legítimos, comprometendo contas e sistemas.

Example

Uma API que armazena senhas em texto plano no banco de dados, ou um aplicativo que transmite tokens de sessão via HTTP em vez de HTTPS, ou que reutiliza a mesma chave criptográfica em múltiplos clientes. Em todos os casos, as credenciais ficam expostas e um invasor consegue se passar pelo usuário legítimo.

How to mitigate

Use hash com salt (bcrypt, Argon2) para senhas, sempre transmita credenciais sobre HTTPS/TLS, implemente expiração e revogação de tokens, use variáveis de ambiente ou cofres de segredos (vaults) para armazenar chaves, e realize auditorias regulares de como credenciais são tratadas no código e infraestrutura.

CVE-2010-5305—Rockwell PLC5/SLC5/0x/RSLogix Credentials managementEPSS 5.7%CVE-2017-3834—A vulnerability in Cisco Aironet 1830 Series and Cisco Aironet 1850 Series Access Points running Cisco Mobility Express Software could allowEPSS 4.5%CVE-2016-6554—Synology NAS servers DS107, DS116, and DS213, use default credentialsEPSS 4.1%CVE-2018-0318—A vulnerability in the password reset function of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attackEPSS 3.2%CVE-2018-0319—A vulnerability in the password recovery function of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attEPSS 3.2%CVE-2020-3140CRITICALCisco Prime License Manager Privilege Escalation VulnerabilityEPSS 3.1%CVE-2016-6551—Intellian Satellite TV antennas t-Series and v-Series, firmware version 1.07, uses default credentialsEPSS 2.9%CVE-2016-6553—Nuuo NT-4040 Titan, firmware NT-4040_01.07.0000.0015_1120, uses default credentialsEPSS 2.9%CVE-2016-6552—Green Packet DX-350 uses default credentialsEPSS 2.9%CVE-2017-10845—Wi-Fi STATION L-02F Software version V10g and earlier allows remote attackers to access the device with administrative privileges and perforEPSS 2.8%CVE-2021-21505HIGHDell EMC Integrated System for Microsoft Azure Stack Hub, versions 1906 – 2011, contain an undocumented default iDRAC account. A remote unauEPSS 2.4%CVE-2018-0226—A vulnerability in the assignment and management of default user accounts for Secure Shell (SSH) access to Cisco Aironet 1800, 2800, and 380EPSS 2.2%CVE-2019-1714MEDIUMCisco Adaptive Security Appliance Software and Firepower Threat Defense Software VPN SAML Authentication Bypass VulnerabilityEPSS 2.0%CVE-2017-16727—A Credentials Management issue was discovered in Moxa NPort W2150A versions prior to 1.11, and NPort W2250A versions prior to 1.11. The defaEPSS 2.0%CVE-2019-7488—Weak default password cause vulnerability in SonicWall Email Security appliance which leads to attacker gain access to appliance database. TEPSS 1.9%CVE-2018-15389—Cisco Prime Collaboration Provisioning Intermittent Hard-Coded Password VulnerabilityEPSS 1.5%CVE-2020-10287CRITICALRVD#3326: Hardcoded default credentials on IRC 5 OPC ServerEPSS 1.4%CVE-2018-7788—A CWE-255 Credentials Management vulnerability exists in Modicon Quantum with firmware versions prior to V2.40. which could cause a Denial OEPSS 1.1%CVE-2018-15719—Open Dental before version 18.4 installs a mysql database and uses the default credentials of "root" with a blank password. This allows anyoEPSS 1.1%CVE-2018-7820—A Credentials Management CWE-255 vulnerability exists in the APC UPS Network Management Card 2 AOS v6.5.6, which could cause Remote MonitoriEPSS 1.0%