CVE-2021-3130

2021-01-2015:45:14

mitre

www.cve.org

open-audit

version 3.5.3

web interface

credentials

exposure

html

obfuscation

developer tools

AI Score

Confidence

High

EPSS

0.002

Percentile

55.1%

JSON

Within the Open-AudIT up to version 3.5.3 application, the web interface hides SSH secrets, Windows passwords, and SNMP strings from users using HTML ‘password field’ obfuscation. By using Developer tools or similar, it is possible to change the obfuscation so that the credentials are visible.