Falhas do tipo CWE-257

65 resultados

Armazenamento de senhas em formato recuperável

A aplicação guarda senhas em um formato que pode ser descriptografado ou revertido para o texto original, como base64, criptografia simétrica ou até plaintext. Isso expõe credenciais a roubo direto quando o banco de dados é comprometido, pois o atacante não precisa fazer força bruta — tem a senha em mãos.

Exemplo

Um sistema de e-mail corporativo que armazena senhas criptografadas com AES, mas a chave fica no mesmo servidor. Se o BD vazar, o atacante descriptografa tudo. Ou um legacy que usa base64 no campo de senha, acreditando que é 'seguro'.

Como mitigar

Use hash criptográfico com salt (bcrypt, Argon2 ou PBKDF2) — armazene apenas o hash, nunca a senha original. Na autenticação, hash o input e compare com o hash guardado. Se for integração com serviço externo que exija armazenar credenciais, use chaves de API em vez de senhas, ou guarde tokens de sessão encriptados com chave externa (HSM).

CVE-2026-20128HIGHCisco Catalyst SD-WAN Manager Information Disclosure VulnerabilityEPSS 6.9%KEVCVE-2023-23382MEDIUMAzure Machine Learning Compute Instance Information Disclosure VulnerabilityEPSS 3.1%CVE-2019-1010241—Jenkins Credentials Binding Plugin Jenkins 1.17 is affected by: CWE-257: Storing Passwords in a Recoverable Format. The impact is: AuthenticEPSS 1.5%CVE-2024-32151MEDIUMUser passwords are decrypted and stored on memory before any user logged in. Those decrypted passwords can be retrieved from the coredump fiEPSS 1.3%CVE-2021-27485—ZOLL Defibrillator Dashboard, v prior to 2.2,The application allows users to store their passwords in a recoverable format, which could alloEPSS 1.2%CVE-2021-0220MEDIUMJunos Space: Shared secrets stored in recoverable format and directly exposed through the UIEPSS 1.2%CVE-2025-57789MEDIUMVulnerability in Initial Administrator Login ProcessEPSS 1.1%CVE-2021-35050MEDIUMUser Credentials Stored in a Recoverable Format within Fidelis Network and DeceptionEPSS 1.0%CVE-2019-5615LOWRapid7 InsightVM Stored Credential ExposureEPSS 0.8%CVE-2019-3736HIGHDell EMC Integrated Data Protection Appliance versions prior to 2.3 contain a password storage vulnerability in the ACM component. A remote EPSS 0.7%CVE-2024-6694LOWWP Mail SMTP <= 4.0.1 - Authenticated (Admin+) SMTP Password ExposureEPSS 0.6%CVE-2023-2881MEDIUMStoring Passwords in a Recoverable Format in pimcore/customer-data-frameworkEPSS 0.5%CVE-2023-38738MEDIUMIBM OpenPages with Watson information disclosureEPSS 0.5%CVE-2020-8296—Nextcloud Server prior to 20.0.0 stores passwords in a recoverable format even when external storage is not configured.EPSS 0.5%CVE-2024-1480HIGHUnitronics Vision Standard Unauthenticated Password RetrievalEPSS 0.5%CVE-2023-21726HIGHWindows Credential Manager User Interface Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2022-32519HIGHA CWE-257: Storing Passwords in a Recoverable Format vulnerability exists that could result in unwanted access to a DCE instance when perforEPSS 0.5%CVE-2023-31150HIGHStoring Passwords in a Recoverable FormatEPSS 0.5%CVE-2023-42955MEDIUMClaris International has successfully resolved an issue of potentially exposing password information to front-end websites when signed in toEPSS 0.4%CVE-2018-5446MEDIUMMedtronic 2090 Carelink Programmer Storing Passwords in a Recoverable FormatEPSS 0.4%