Fallos del tipo CWE-523

27 resultados

Transporte desprotegido de credenciais

Credenciais (senhas, tokens, chaves) são enviadas pela rede sem criptografia ou proteção adequada, permitindo que um atacante na mesma rede as capture facilmente. O risco é crítico porque expõe diretamente os dados de autenticação mais sensíveis.

Ejemplo

Uma aplicação web envia login/senha via HTTP simples em vez de HTTPS, ou um cliente envia token de API em texto claro dentro de um pacote TCP não criptografado. Um atacante na rede (ou em um Wi-Fi público) captura essas credenciais com ferramentas como tcpdump e as reutiliza imediatamente.

Cómo mitigar

Use sempre TLS/SSL (HTTPS) para qualquer transmissão de credenciais; valide certificados no lado cliente; implemente mecanismos como OAuth 2.0 ou JWT para reduzir exposição de senhas; nunca transmita credenciais em URLs ou parâmetros GET visíveis em logs.

CVE-2023-28708MEDIUMApache Tomcat: JSESSIONID Cookie missing secure attribute in some configurationsEPSS 1.8%CVE-2021-38460HIGHMoxa MXview Network Management SoftwareEPSS 1.8%CVE-2020-25175—GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during transport over the network.EPSS 1.1%CVE-2022-31805HIGHInsecure transmission of credentialsEPSS 1.0%CVE-2024-1102MEDIUMJberet: jberet-core logging database credentialsEPSS 0.8%CVE-2017-16731—An Unprotected Transport of Credentials issue was discovered in ABB Ellipse 8.3 through Ellipse 8.9 released prior to December 2017 (includiEPSS 0.7%CVE-2023-22862MEDIUMIBM Aspera information disclosureEPSS 0.6%CVE-2023-31277HIGHPiiGAB M-Bus Unprotected Transport of CredentialsEPSS 0.6%CVE-2025-41705MEDIUMPhoenix Contact: WebSocket Message Interception Leaks Webfrontend CredentialsEPSS 0.5%CVE-2025-57800HIGHAudiobookshelf vulnerable to OIDC token exfiltration and account takeoverEPSS 0.5%CVE-2024-1509HIGHBrocade ASCG 3.2.0 web interface does not enforce HSTS, as defined by RFC 6797 for ports 8030 and 8100EPSS 0.4%CVE-2026-113866MEDIUMAccount password sent unencrypted during Exchange account setupEPSS 0.4%CVE-2026-23635MEDIUMKiteworks Secure Data Forms has a potential Unprotected Transport of CredentialsEPSS 0.3%CVE-2025-61121HIGHMobile Scanner Android App version 2.12.38 (package name com.glority.everlens), developed by Glority Global Group Ltd., contains a credentiaEPSS 0.3%CVE-2026-54784HIGHCoreWCF: SPNEGO SecurityContextToken proof key wrapped without confidentialityEPSS 0.3%CVE-2026-8668LOWHardcoded credentials in embedded contentEPSS 0.3%CVE-2026-56587LOWHCL IEM was affected with Strict transport security not enforcedEPSS 0.2%CVE-2025-64308HIGHBrightpick Mission Control / Internal Logic Control Unprotected Transport of CredentialsEPSS 0.2%CVE-2021-32003HIGHConfiguration service port remains open 10 minutes after reboot even when already provisionedEPSS 0.2%CVE-2025-64309MEDIUMBrightpick Mission Control / Internal Logic Control Unprotected Transport of CredentialsEPSS 0.2%