Common Weakness Enumeration
CWE-549 Missing Password Field Masking
Description
The product does not mask passwords during entry, increasing the potential for attackers to observe and capture passwords.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-549 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-w54x-xfxg-4gxq | CVE-2025-54467 | MODERATE |
NeuVector process with sensitive arguments lead to leakage |
2026-07-02 | |
| GHSA-c978-wq47-pvvw | CVE-2025-64170 | LOW | - |
sudo-rs: Partial password reveal is possible after timeout |
2025-11-15 |
| GHSA-2x3g-rr4w-4qrp | CVE-2025-30197 | LOW |
Jenkins Zoho QEngine Plugin Displays Unmasked API Keys |
2025-03-21 | |
| GHSA-4352-jxwg-88rm | CVE-2025-0148 | LOW |
Jenkins Zoom Plugin is Missing Password Field Masking |
2025-03-13 | |
| GHSA-mf4p-wjrm-cmjp | CVE-2022-43426 | LOW |
AWS secrets displayed without masking by Jenkins S3 Explorer Plugin |
2022-12-16 | |
| GHSA-cpm5-cqr9-7p79 | CVE-2022-41248 | LOW |
Jenkins BigPanda Notifier Plugin Missing Password Field Masking |
2022-12-09 |