Common Weakness Enumeration

CWE-523 Unprotected Transport of Credentials

Description

Login pages do not use adequate measures to protect the user name and password while they are in transit from the client to the server.

Associated Reviewed Advisories

Vulnerabilities classified under CWE-523 ordered by modification date.

4 reviewed records
Advisory ID NVD ID Severity PURLs Summary Last Modified
GHSA-2288-8h3r-cqgg CVE-2026-54784 HIGH
nuget/CoreWCF.Primitives

CoreWCF: SPNEGO SecurityContextToken proof key wrapped without confidentiality

 2026-06-19
GHSA-vrjc-q2fh-6x9h CVE-2025-61916 HIGH
maven/io.spinnaker.clouddriver/clouddriver-artifacts

Spinnaker vulnerable to SSRF due to improper restrictions on http from user input

 2026-01-06
GHSA-2c9m-w27f-53rm CVE-2023-28708 MODERATE
maven/org.apache.tomcat/tomcat-catalina

Apache Tomcat vulnerable to Unprotected Transport of Credentials

 2025-11-04
GHSA-9wmf-xf3h-r8pr CVE-2024-1102 MODERATE
maven/org.jberet/jberet-core

Jberet: jberet-core logging database credentials

 2025-10-24