Fallos del tipo CWE-257

65 resultados

Armazenamento de senhas em formato recuperável

A aplicação guarda senhas de forma que elas podem ser recuperadas em texto plano ou facilmente descriptografadas, em vez de usar hash irreversível. Isso viola o princípio fundamental de segurança: nunca armazene senhas de forma que você (ou um atacante com acesso ao banco) consiga ler ou reconstruir a senha original.

Ejemplo

Um banco de dados que armazena senhas criptografadas com uma chave fixa no código-fonte (ou até em texto plano) permite que qualquer pessoa com acesso ao banco ou ao código extraia todas as senhas. Se um atacante invade o servidor, rouba o arquivo de configuração com a chave de criptografia e o banco de dados, consegue descriptografar todas as senhas em segundos.

Cómo mitigar

Use sempre funções de hash criptográfico com salt (como bcrypt, PBKDF2 ou Argon2) no armazenamento. Na autenticação, compare o hash da senha fornecida com o hash armazenado — nunca descriptografe. Descarte a chave de criptografia do código e nunca tente 'rever' uma senha; ofereça apenas reset.

CVE-2026-20128HIGHCisco Catalyst SD-WAN Manager Information Disclosure VulnerabilityEPSS 6.9%KEVCVE-2023-23382MEDIUMAzure Machine Learning Compute Instance Information Disclosure VulnerabilityEPSS 3.1%CVE-2019-1010241—Jenkins Credentials Binding Plugin Jenkins 1.17 is affected by: CWE-257: Storing Passwords in a Recoverable Format. The impact is: AuthenticEPSS 1.5%CVE-2024-32151MEDIUMUser passwords are decrypted and stored on memory before any user logged in. Those decrypted passwords can be retrieved from the coredump fiEPSS 1.3%CVE-2021-27485—ZOLL Defibrillator Dashboard, v prior to 2.2,The application allows users to store their passwords in a recoverable format, which could alloEPSS 1.2%CVE-2021-0220MEDIUMJunos Space: Shared secrets stored in recoverable format and directly exposed through the UIEPSS 1.2%CVE-2025-57789MEDIUMVulnerability in Initial Administrator Login ProcessEPSS 1.1%CVE-2021-35050MEDIUMUser Credentials Stored in a Recoverable Format within Fidelis Network and DeceptionEPSS 1.0%CVE-2019-5615LOWRapid7 InsightVM Stored Credential ExposureEPSS 0.8%CVE-2019-3736HIGHDell EMC Integrated Data Protection Appliance versions prior to 2.3 contain a password storage vulnerability in the ACM component. A remote EPSS 0.7%CVE-2024-6694LOWWP Mail SMTP <= 4.0.1 - Authenticated (Admin+) SMTP Password ExposureEPSS 0.6%CVE-2023-2881MEDIUMStoring Passwords in a Recoverable Format in pimcore/customer-data-frameworkEPSS 0.5%CVE-2023-38738MEDIUMIBM OpenPages with Watson information disclosureEPSS 0.5%CVE-2020-8296—Nextcloud Server prior to 20.0.0 stores passwords in a recoverable format even when external storage is not configured.EPSS 0.5%CVE-2024-1480HIGHUnitronics Vision Standard Unauthenticated Password RetrievalEPSS 0.5%CVE-2023-21726HIGHWindows Credential Manager User Interface Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2022-32519HIGHA CWE-257: Storing Passwords in a Recoverable Format vulnerability exists that could result in unwanted access to a DCE instance when perforEPSS 0.5%CVE-2023-31150HIGHStoring Passwords in a Recoverable FormatEPSS 0.5%CVE-2023-42955MEDIUMClaris International has successfully resolved an issue of potentially exposing password information to front-end websites when signed in toEPSS 0.4%CVE-2018-5446MEDIUMMedtronic 2090 Carelink Programmer Storing Passwords in a Recoverable FormatEPSS 0.4%