Weaknesses of type CWE-257

65 results

Armazenamento de senhas em formato recuperável

A aplicação guarda senhas de forma que podem ser recuperadas em texto plano ou descriptografadas facilmente (como encriptação reversível ou hash sem salt). Isso viola o princípio de que senhas nunca devem ser recuperáveis: um atacante que comprometa o banco de dados consegue usar as senhas imediatamente.

Example

Um sistema de e-commerce armazena senhas encriptadas com AES usando uma chave fixa no código. Quando alguém faz SQL injection ou rouba o backup do banco, consegue descriptografar todas as senhas porque a chave está exposta no repositório Git.

How to mitigate

Use funções de hash com salt (bcrypt, scrypt, Argon2) — não encriptação reversível. Valide que as senhas não são recuperáveis nem em backups, e revise regularmente como credenciais são armazenadas. Se guardar senhas de terceiros, use padrões como OAuth em vez de armazená-las.

CVE-2026-20128HIGHCisco Catalyst SD-WAN Manager Information Disclosure VulnerabilityEPSS 6.9%KEVCVE-2023-23382MEDIUMAzure Machine Learning Compute Instance Information Disclosure VulnerabilityEPSS 3.1%CVE-2019-1010241—Jenkins Credentials Binding Plugin Jenkins 1.17 is affected by: CWE-257: Storing Passwords in a Recoverable Format. The impact is: AuthenticEPSS 1.5%CVE-2024-32151MEDIUMUser passwords are decrypted and stored on memory before any user logged in. Those decrypted passwords can be retrieved from the coredump fiEPSS 1.3%CVE-2021-27485—ZOLL Defibrillator Dashboard, v prior to 2.2,The application allows users to store their passwords in a recoverable format, which could alloEPSS 1.2%CVE-2021-0220MEDIUMJunos Space: Shared secrets stored in recoverable format and directly exposed through the UIEPSS 1.2%CVE-2025-57789MEDIUMVulnerability in Initial Administrator Login ProcessEPSS 1.1%CVE-2021-35050MEDIUMUser Credentials Stored in a Recoverable Format within Fidelis Network and DeceptionEPSS 1.0%CVE-2019-5615LOWRapid7 InsightVM Stored Credential ExposureEPSS 0.8%CVE-2019-3736HIGHDell EMC Integrated Data Protection Appliance versions prior to 2.3 contain a password storage vulnerability in the ACM component. A remote EPSS 0.7%CVE-2024-6694LOWWP Mail SMTP <= 4.0.1 - Authenticated (Admin+) SMTP Password ExposureEPSS 0.6%CVE-2023-2881MEDIUMStoring Passwords in a Recoverable Format in pimcore/customer-data-frameworkEPSS 0.5%CVE-2023-38738MEDIUMIBM OpenPages with Watson information disclosureEPSS 0.5%CVE-2020-8296—Nextcloud Server prior to 20.0.0 stores passwords in a recoverable format even when external storage is not configured.EPSS 0.5%CVE-2024-1480HIGHUnitronics Vision Standard Unauthenticated Password RetrievalEPSS 0.5%CVE-2023-21726HIGHWindows Credential Manager User Interface Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2022-32519HIGHA CWE-257: Storing Passwords in a Recoverable Format vulnerability exists that could result in unwanted access to a DCE instance when perforEPSS 0.5%CVE-2023-31150HIGHStoring Passwords in a Recoverable FormatEPSS 0.5%CVE-2023-42955MEDIUMClaris International has successfully resolved an issue of potentially exposing password information to front-end websites when signed in toEPSS 0.4%CVE-2018-5446MEDIUMMedtronic 2090 Carelink Programmer Storing Passwords in a Recoverable FormatEPSS 0.4%