How severe is CVE-2023-34128?

This vulnerability has a severity rating of CRITICAL with a CVSS score of 9.8 out of 10.

What type of vulnerability is CVE-2023-34128?

This is classified as CWE-260, which is a common weakness in software security.

CVE-2023-34128

CRITICAL Year: 2023

CVSS v3 Score

9.8

Critical

Weakness Type

CWE-260

View all →

Vulnerability Description

Tomcat application credentials are hardcoded in SonicWall GMS and Analytics configuration file. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.

CVE-2016-7043

CRITICAL

CVSS:9.8(Critical)

It has been reported that KIE server and Busitess Central before version 7.21.0.Final contain username and password as plaintext Java properties. Any app deployed on the same server would have access ...

CWE-2602016

CVE-2017-7925

CRITICAL

CVSS:9.8(Critical)

A Password in Configuration File issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-HDW1XXX, DH-IPC-HDW2XXX, DH-IPC-HDW4XXX, DH-IPC-HFW1XXX, DH-IPC-HFW2XXX, DH-IPC-HFW4XXX, ...

CWE-2602017

CVE-2019-3780

CRITICAL

CVSS:9.1(Critical)

Cloud Foundry Container Runtime, versions prior to 0.28.0, deploys K8s worker nodes that contains a configuration file with IAAS credentials. A malicious user with access to the k8s nodes can obtain I...

CWE-2602019

CVE-2017-7923

HIGH

CVSS:8.8(High)

A Password in Configuration File issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series V5.2.0 build 140721 to V5.4.0 Build 160401, DS-...

CWE-2602017

CVE-2025-32111

HIGH

CVSS:8.7(High)

The Docker image from acme.sh before 40b6db6 is based on a .github/workflows/dockerhub.yml file that lacks "persist-credentials: false" for actions/checkout.

CWE-2602025