Falhas do tipo CWE-257

65 resultados

Armazenamento de senhas em formato recuperável

A aplicação guarda senhas em um formato que pode ser descriptografado ou revertido para o texto original, como base64, criptografia simétrica ou até plaintext. Isso expõe credenciais a roubo direto quando o banco de dados é comprometido, pois o atacante não precisa fazer força bruta — tem a senha em mãos.

Exemplo

Um sistema de e-mail corporativo que armazena senhas criptografadas com AES, mas a chave fica no mesmo servidor. Se o BD vazar, o atacante descriptografa tudo. Ou um legacy que usa base64 no campo de senha, acreditando que é 'seguro'.

Como mitigar

Use hash criptográfico com salt (bcrypt, Argon2 ou PBKDF2) — armazene apenas o hash, nunca a senha original. Na autenticação, hash o input e compare com o hash guardado. Se for integração com serviço externo que exija armazenar credenciais, use chaves de API em vez de senhas, ou guarde tokens de sessão encriptados com chave externa (HSM).

CVE-2024-32932MEDIUMAmerican Dynamics Illustra Essentials Gen 4 - Reversible User Credential - stored web interfaceEPSS 0.4%CVE-2024-32042MEDIUMCyberPower PowerPanel business Storing Passwords in a Recoverable FormatEPSS 0.4%CVE-2025-58049MEDIUMXWiki PDF export jobs store sensitive cookies unencrypted in job statusesEPSS 0.4%CVE-2019-18256—BIOTRONIK CardioMessenger II, The affected products use individual per-device credentials that are stored in a recoverable format. An attackEPSS 0.4%CVE-2024-32756MEDIUMAmerican Dynamics Illustra Essentials Gen 4 - Reversible User Credential - LinuxEPSS 0.4%CVE-2025-44958MEDIUMRUCKUS Network Director (RND) before 4.5 stores passwords in a recoverable format.EPSS 0.4%CVE-2025-8904CRITICALPrivilege escalation issue in Amazon EMR Secret Agent componentEPSS 0.3%CVE-2024-3073LOWEasy WP SMTP by SendLayer <= 2.3.0 - Exposure of Sensitive Information via the UIEPSS 0.3%CVE-2024-8774HIGHPrivilege Escalation in SIMPLE.ERPEPSS 0.3%CVE-2023-5627HIGHIncorrect Implementation of Authentication Algorithm VulnerabilityEPSS 0.3%CVE-2025-24852MEDIUMStoring passwords in a recoverable format issue exists in CHOCO TEI WATCHER mini (IB-MCT001) all versions. If this issue is exploited, an atEPSS 0.3%CVE-2019-6567—A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All Versions < V5.2.4), SCALANCE X-200IRT sEPSS 0.3%CVE-2025-25983LOWAn issue in Macro-video Technologies Co.,Ltd V380 Pro android application 2.1.44 and V380 Pro android application 2.1.64 allows an attacker EPSS 0.3%CVE-2019-19096MEDIUMABB eSOMS: REDIS clear text credentialsEPSS 0.3%CVE-2024-3543MEDIUMLoadMaster Reversible Password Encryption AlgorithmEPSS 0.3%CVE-2017-9942—A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker with local access to thEPSS 0.3%CVE-2026-22574MEDIUMA storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.4, FortiSOAR PaaS 7.5.0 through 7.5.2EPSS 0.3%CVE-2024-51552HIGHWeak Password StorageEPSS 0.3%CVE-2026-22576MEDIUMA storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.4, FortiSOAR PaaS 7.5.0 through 7.5.2EPSS 0.3%CVE-2022-46142MEDIUMAffected devices store the CLI user passwords encrypted in flash memory. Attackers with physical access to the device could retrieve the filEPSS 0.3%