Falhas do tipo CWE-255

61 resultados

Erros na Gestão de Credenciais

Fraqueza genérica que abrange falhas no armazenamento, transmissão ou validação de credenciais (senhas, tokens, chaves API). O software não protege adequadamente essas informações sensíveis, permitindo que um atacante as intercepte, recupere ou reutilize para ganhar acesso não autorizado.

Exemplo

Uma aplicação que transmite senha em texto plano via HTTP, armazena tokens de autenticação em cookies sem flag HttpOnly, ou valida credenciais contra um banco de dados sem hash. Um atacante na rede ou com acesso ao banco pode roubar essas credenciais e se passar pelo usuário legítimo.

Como mitigar

Use HTTPS/TLS para toda transmissão de credenciais, armazene senhas com algoritmos de hash forte (bcrypt, Argon2), implemente flags de segurança em cookies (HttpOnly, Secure, SameSite), nunca registre credenciais em logs, e valide credenciais de forma consistente em cada requisição autenticada.

CVE-2010-5305—Rockwell PLC5/SLC5/0x/RSLogix Credentials managementEPSS 5.7%CVE-2017-3834—A vulnerability in Cisco Aironet 1830 Series and Cisco Aironet 1850 Series Access Points running Cisco Mobility Express Software could allowEPSS 4.5%CVE-2016-6554—Synology NAS servers DS107, DS116, and DS213, use default credentialsEPSS 4.1%CVE-2018-0319—A vulnerability in the password recovery function of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attEPSS 3.2%CVE-2018-0318—A vulnerability in the password reset function of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attackEPSS 3.2%CVE-2020-3140CRITICALCisco Prime License Manager Privilege Escalation VulnerabilityEPSS 3.1%CVE-2016-6551—Intellian Satellite TV antennas t-Series and v-Series, firmware version 1.07, uses default credentialsEPSS 2.9%CVE-2016-6553—Nuuo NT-4040 Titan, firmware NT-4040_01.07.0000.0015_1120, uses default credentialsEPSS 2.9%CVE-2016-6552—Green Packet DX-350 uses default credentialsEPSS 2.9%CVE-2017-10845—Wi-Fi STATION L-02F Software version V10g and earlier allows remote attackers to access the device with administrative privileges and perforEPSS 2.8%CVE-2021-21505HIGHDell EMC Integrated System for Microsoft Azure Stack Hub, versions 1906 – 2011, contain an undocumented default iDRAC account. A remote unauEPSS 2.4%CVE-2018-0226—A vulnerability in the assignment and management of default user accounts for Secure Shell (SSH) access to Cisco Aironet 1800, 2800, and 380EPSS 2.2%CVE-2019-1714MEDIUMCisco Adaptive Security Appliance Software and Firepower Threat Defense Software VPN SAML Authentication Bypass VulnerabilityEPSS 2.0%CVE-2017-16727—A Credentials Management issue was discovered in Moxa NPort W2150A versions prior to 1.11, and NPort W2250A versions prior to 1.11. The defaEPSS 2.0%CVE-2019-7488—Weak default password cause vulnerability in SonicWall Email Security appliance which leads to attacker gain access to appliance database. TEPSS 1.9%CVE-2018-15389—Cisco Prime Collaboration Provisioning Intermittent Hard-Coded Password VulnerabilityEPSS 1.5%CVE-2020-10287CRITICALRVD#3326: Hardcoded default credentials on IRC 5 OPC ServerEPSS 1.4%CVE-2018-7788—A CWE-255 Credentials Management vulnerability exists in Modicon Quantum with firmware versions prior to V2.40. which could cause a Denial OEPSS 1.1%CVE-2018-15719—Open Dental before version 18.4 installs a mysql database and uses the default credentials of "root" with a blank password. This allows anyoEPSS 1.1%CVE-2018-7820—A Credentials Management CWE-255 vulnerability exists in the APC UPS Network Management Card 2 AOS v6.5.6, which could cause Remote MonitoriEPSS 1.0%