CWE-257— Storing Passwords in a Recoverable Format
The storage of passwords in a recoverable format makes them subject to password reuse attacks by malicious users. In fact, it should be noted that recoverable encrypted passwords provide no significant benefit over plaintext passwords since they are subject not only to reuse by malicious attackers but also by malicious insiders. If a system administrator can recover a password directly, or use a brute force search on the available information, the administrator can use the password on other accounts.— MITRE CWE catalog
70 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-257page 2 of 2
- CVE-2026-1836MEDIUMCVSS 5.3EG 5.32026-06-12
The system stores the username and password from the login form after submitting the request. This could allow an attacker with access to the platform to return to the browser and view the login credentials.
- CVE-2025-35054MEDIUMCVSS 5.3EG 5.32025-10-09
Newforma Info Exchange (NIX) stores credentials used to configure NPCS in 'HKLM\Software\WOW6432Node\Newforma\<version>\Credentials'. The credentials are encrypted but the encryption key is stored in the same registry location. Authentica…
- CVE-2025-44958MEDIUMCVSS 5.3EG 5.32025-08-04
RUCKUS Network Director (RND) before 4.5 stores passwords in a recoverable format.
- CVE-2018-5446MEDIUMCVSS 4.9EG 5.32018-05-04
Medtronic 2090 CareLink Programmer uses a per-product username and password that is stored in a recoverable format.
- CVE-2023-31001MEDIUMCVSS 5.1EG 5.12024-01-11
IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.6.1) temporarily stores sensitive information in files that could be accessed by a local user.…
- CVE-2024-32042MEDIUMCVSS 4.9EG 4.92024-05-15
The key used to encrypt passwords stored in the database can be found in the CyberPower PowerPanel application code, allowing the passwords to be recovered.
- CVE-2023-2881MEDIUMCVSS 4.9EG 4.92023-05-25
Storing Passwords in a Recoverable Format in GitHub repository pimcore/customer-data-framework prior to 3.3.10.
- CVE-2026-80176MEDIUMCVSS 4.7EG 4.72026-09-07
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Plaintext Storage of a Password vulnerability. A low privileged attacker with local access could potentially exploit …
- CVE-2025-24852MEDIUMCVSS 4.6EG 4.62025-03-31
Storing passwords in a recoverable format issue exists in CHOCO TEI WATCHER mini (IB-MCT001) all versions. If this issue is exploited, an attacker who can access the microSD card used on the product may obtain the product login password.
- CVE-2019-18256MEDIUMCVSS 4.6EG 4.62020-06-29
BIOTRONIK CardioMessenger II, The affected products use individual per-device credentials that are stored in a recoverable format. An attacker with physical access to the CardioMessenger can use these credentials for network authentication…
- CVE-2025-40774MEDIUMCVSS 4.4EG 4.42025-10-14
A vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected server applications store user passwords encrypted in its database. Decryption keys are accessible to users with administrative privileges, allowing t…
- CVE-2025-27459MEDIUMCVSS 4.4EG 4.42025-07-03
The VNC application stores its passwords encrypted within the registry but uses DES for encryption. As DES is broken, the original passwords can be recovered.
- CVE-2026-22576MEDIUMCVSS 4.3EG 4.32026-04-14
A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.4, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 thro…
- CVE-2023-2358MEDIUMCVSS 4.3EG 4.32023-09-27
Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.5.0.0 and 9.3.0.4, including 8.3.x.x, saves passwords of the Hadoop Copy Files step in plaintext.
- CVE-2026-22574MEDIUMCVSS 4.1EG 4.12026-04-14
A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.4, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 thro…
- CVE-2025-25983LOWCVSS 3.4EG 3.42025-04-18
An issue in Macro-video Technologies Co.,Ltd V380 Pro android application 2.1.44 and V380 Pro android application 2.1.64 allows an attacker to obtain sensitive information via the QE code based sharing component.
- CVE-2024-45744LOWCVSS 3.0EG 3.02024-09-27
TopQuadrant TopBraid EDG stores external credentials insecurely. An authenticated attacker with file system access can read edg-setup.properites and obtain the secret to decrypt external passwords stored in edg-vault.properties. An authent…
- CVE-2024-6694LOWCVSS 2.7EG 2.72024-07-20
The WP Mail SMTP plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 4.0.1. This is due to plugin providing the SMTP password in the SMTP Password field when viewing the settings. This makes it …
- CVE-2024-3073LOWCVSS 2.7EG 2.72024-06-13
The Easy WP SMTP by SendLayer – WordPress SMTP and Email Log Plugin plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 2.3.0. This is due to plugin providing the SMTP password in the SMTP Pas…
- CVE-2024-32122LOWCVSS 2.1EG 2.32025-04-08
A storing passwords in a recoverable format in Fortinet FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions allows attacker to information disclosure via modification of LDAP server IP …
Map vulnerabilities like CWE-257 to your infrastructure
EchelonGraph correlates every CVE — across CWE-257 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Book a Demo →