CWE-555 J2EE Misconfiguration: Plaintext Password in Configuration File
variantThe J2EE application stores a plaintext password in a configuration file.
01
parent weaknesses
Broader classes this is a kind of.
02
vulnerabilities (2)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-20059US | medium6.5OT elevated | — | ||
A vulnerability in the implementation of the Cisco Network Plug-and-Play (PnP) agent of Cisco DNA Center could allow an authenticated, remote attacker to view sensitive information… | ||||
| CVE-2025-46119US | — | — | ||
An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.27 and 200.18.7.1.323, and in Ruckus ZoneDirector prior to 10.5.1.0.282, where an authenticated request… | ||||
03
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan