On this page

CWE-522: Insufficiently Protected Credentials

Weakness Summary

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

  • Canonical source: MITRE CWE-522
  • Published Atomicorp CVE observations: 9
  • Distinct affected products in those observations: 8
  • Active Atomicorp rules associated with this weakness: 12

Atomicorp Research Context

Atomicorp has published CVE-specific research observations associated with this weakness category. Each linked CVE page states whether the tested request was detected or blocked and is the authoritative customer-facing finding.

The CVEs and rules shown here are selected published examples, not a complete list of Atomicorp protections. If a CWE, CVE, or rule is absent from this page, no conclusion should be drawn about whether Atomicorp protects against that weakness or attack method.

A CWE describes a class of software weakness. It does not identify one exploit request, and association with a CWE does not mean that every vulnerability or exploitation path in that category is detected or blocked.

Selected Published CVE Observations

CVEVulnerabilityProductAtomicorp findingObserved rules
CVE-2017-8225GoAhead Camera - Credential Disclosurewireless ip camera (p2p) firmwareProtected by Atomicorp rules390716
CVE-2018-9160SickRage < v2018.03.09 - Clear-Text Credentials HTTP ResponsesickrageProtected by Atomicorp rules390727 , 392301 , 392648
CVE-2019-17662ThinVNC Directory TraversalthinvncProtected by Atomicorp rules390716
CVE-2024-32238H3C ER8300G2-X - Password Disclosure-Protected by Atomicorp rules390716
CVE-2024-44000Wordpress LiteSpeed Cache plugin cookie theftlitespeed cacheProtected by Atomicorp rules360152 , 390716
CVE-2026-67426Flyto2 Core: Unauthenticated flyto-verification /run: callback_url SSRF and internal runner-secret exfiltrationflyto-coreProtected by Atomicorp rules337109 , 337110 , 344360 , 398021 , 398022
CVE-2019-19823TOTOLINK/Realtek Routers - Information Disclosurea3002ru firmwareProtected by Atomicorp rules390716
CVE-2025-34078NSClient++ 0.5.2.35 - Privilege escalationnsclient++Protected by Atomicorp rules344370
CVE-2026-115750mcp-from-openapi from 2.5.0 before 2.9.0 Credential Leak via Cross-Origin Redirectsmcp-from-openapiProtected by Atomicorp rules344365

Associated Atomicorp WAF Rules

RuleStatusBehavior
337109Activedisruptive (deny)
337110Activedisruptive (deny)
344360Activedisruptive (deny)
344365Activedisruptive (deny)
344370Activedisruptive (deny)
360152Activedisruptive (deny)
390716Activedisruptive (deny)
390727Activedisruptive (deny)
392301Activedisruptive (deny)
392648Activedisruptive (deny)
398021Activedisruptive (deny)
398022Activedisruptive (deny)

MITRE associates this CWE with the following attack-pattern entries. These taxonomy relationships are context, not Atomicorp coverage claims:

CAPEC-102 , CAPEC-474 , CAPEC-50 , CAPEC-509 , CAPEC-551 , CAPEC-555 , CAPEC-560 , CAPEC-561 , CAPEC-600 , CAPEC-644 , CAPEC-645 , CAPEC-652 , CAPEC-653