Fallos del tipo CWE-257

67 resultados

Armazenamento de senhas em formato recuperável

A aplicação guarda senhas de forma que elas podem ser recuperadas em texto plano ou facilmente descriptografadas, em vez de usar hash irreversível. Isso viola o princípio fundamental de segurança: nunca armazene senhas de forma que você (ou um atacante com acesso ao banco) consiga ler ou reconstruir a senha original.

Ejemplo

Um banco de dados que armazena senhas criptografadas com uma chave fixa no código-fonte (ou até em texto plano) permite que qualquer pessoa com acesso ao banco ou ao código extraia todas as senhas. Se um atacante invade o servidor, rouba o arquivo de configuração com a chave de criptografia e o banco de dados, consegue descriptografar todas as senhas em segundos.

Cómo mitigar

Use sempre funções de hash criptográfico com salt (como bcrypt, PBKDF2 ou Argon2) no armazenamento. Na autenticação, compare o hash da senha fornecida com o hash armazenado — nunca descriptografe. Descarte a chave de criptografia do código e nunca tente 'rever' uma senha; ofereça apenas reset.

CVE-2024-32932MEDIUMAmerican Dynamics Illustra Essentials Gen 4 - Reversible User Credential - stored web interfaceEPSS 0.4%CVE-2024-32042MEDIUMCyberPower PowerPanel business Storing Passwords in a Recoverable FormatEPSS 0.4%CVE-2018-5446MEDIUMMedtronic 2090 Carelink Programmer Storing Passwords in a Recoverable FormatEPSS 0.4%CVE-2025-58049MEDIUMXWiki PDF export jobs store sensitive cookies unencrypted in job statusesEPSS 0.4%CVE-2019-18256—BIOTRONIK CardioMessenger II, The affected products use individual per-device credentials that are stored in a recoverable format. An attackEPSS 0.4%CVE-2024-32756MEDIUMAmerican Dynamics Illustra Essentials Gen 4 - Reversible User Credential - LinuxEPSS 0.4%CVE-2025-44958MEDIUMRUCKUS Network Director (RND) before 4.5 stores passwords in a recoverable format.EPSS 0.3%CVE-2025-8904CRITICALPrivilege escalation issue in Amazon EMR Secret Agent componentEPSS 0.3%CVE-2024-3073LOWEasy WP SMTP by SendLayer <= 2.3.0 - Exposure of Sensitive Information via the UIEPSS 0.3%CVE-2024-8774HIGHPrivilege Escalation in SIMPLE.ERPEPSS 0.3%CVE-2024-51552HIGHWeak Password StorageEPSS 0.3%CVE-2025-24852MEDIUMStoring passwords in a recoverable format issue exists in CHOCO TEI WATCHER mini (IB-MCT001) all versions. If this issue is exploited, an atEPSS 0.3%CVE-2025-25983LOWAn issue in Macro-video Technologies Co.,Ltd V380 Pro android application 2.1.44 and V380 Pro android application 2.1.64 allows an attacker EPSS 0.3%CVE-2023-5627HIGHIncorrect Implementation of Authentication Algorithm VulnerabilityEPSS 0.3%CVE-2017-9942—A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker with local access to thEPSS 0.3%CVE-2019-6567—A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All Versions < V5.2.4), SCALANCE X-200IRT sEPSS 0.3%CVE-2019-19096MEDIUMABB eSOMS: REDIS clear text credentialsEPSS 0.3%CVE-2024-3543MEDIUMLoadMaster Reversible Password Encryption AlgorithmEPSS 0.3%CVE-2026-22574MEDIUMA storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.4, FortiSOAR PaaS 7.5.0 through 7.5.2EPSS 0.3%CVE-2026-22576MEDIUMA storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.4, FortiSOAR PaaS 7.5.0 through 7.5.2EPSS 0.3%