CWE-52238 advisories

Insufficiently Protected Credentials

What it is

Credentials are stored or transmitted without adequate protection, so they can be intercepted or read.

How to fix it

Upgrade, rotate the exposed credentials, and store them hashed/encrypted.

How to avoid it

Never log or store credentials in plaintext; use a secret manager and strong hashing.

Known Insufficiently Protected Credentials vulnerabilities

Stateward flags Insufficiently Protected Credentials in your own code and dependencies on every pull request.

Scan my repo

Summarize with AI

ChatGPTClaudePerplexity

Sources: CISA KEV (public domain), OSV.dev & GitHub Advisory Database (CC-BY-4.0), FIRST EPSS, NVD/CWE (public domain). Served live from the Stateward advisory database.