CWE-256 Plaintext Storage of a Password

Jenkins FitNesse Plugin stores passwords unencrypted

Prometheus Azure AD remote write OAuth client secret exposed via config API

Steeltoe: OAEP setting silently selects PKCS#1 v1.5 padding

Lemur user-update path stores plaintext passwords

motionEye: Authentication possible via password hash

Langflow has an Information Leak through Incomplete API Key Redaction

openssl-encrypt has visible password in process list via --password CLI argument

NATS has MQTT plaintext password disclosure

NocoDB has Plaintext Storage of Shared View Passwords

Jenkins Xooa Plugin vulnerability does not mask its Xooa Deployment Token

Jenkins Warrior Framework Plugin vulnerability exposes unencrypted passwords to certain authenticated users

Jenkins Sensedia API Platform Plugin vulnerability exposes unencrypted tokens

Jenkins VAddy Plugin vulnerability exposes plaintext keys on its job configuration form

Jenkins Nouvola DiveCloud Plugin vulnerability does not mask keys on its job configuration form

Jenkins IFTTT Build Notifier Plugin vulnerability exposes IFTTT Maker Channel Keys

Jenkins Apica Loadtest Plugin vulnerability exposes authentication tokens

Jenkins QMetry Test Management Plugin vulnerability exposes API keys

Jenkins Apica Loadtest Plugin vulnerability exposes authentication tokens

Jenkins ReadyAPI Functional Testing Plugin vulnerability stores unencrypted authentication credentials

Jenkins Statistics Gatherer Plugin does not mask AWS Secret Key

Jenkins Reverse Proxy Auth Plugin vulnerable due to plaintext storage of passwords

Clear Text Credentials Exposed via Onboarding Task

Rancher's RKE1 Encryption Config kept in plain-text within cluster AppliedSpec

Zowe CLI allows storage of previously entered secure credentials in a plaintext file

TYPO3 Information Disclosure in User Authentication