3954 matches found
API keys stored in plain text by stackhammer
stackhammer 1.0.6 and earlier stores Stack Hammer API keys unencrypted in job config.xml files on the Jenkins controller as part of its configuration. These API keys can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system. As of publication of thi...
API keys stored in plain text by vmanager-plugin
vmanager-plugin 4.0.0-282.v5096ac2db275 and earlier stores Verisium Manager vAPI keys unencrypted in job config.xml files on the Jenkins controller as part of its configuration. These API keys can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file syste...
API keys stored and displayed in plain text by asakusa-satellite-plugin
asakusa-satellite-plugin 0.1.1 and earlier stores AsakusaSatellite API keys unencrypted in job config.xml files on the Jenkins controller as part of its configuration. These API keys can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...
[SECURITY] Fedora 42 Update: dokuwiki-20240206b-1.fc42
DokuWiki is a standards compliant, simple to use Wiki, mainly aimed at creati ng documentation of any kind. It has a simple but powerful syntax which makes su re the data-files remain readable outside the Wiki and eases the creation of structured texts. All data is stored in plain text files no...
CVE-2025-0418
Valmet DNA user passwords in plain text. This practice poses a security risk as attackers who gain access to local project data can read the passwords...
CVE-2025-0418 Valmet DNA user passwords in plain text
Valmet DNA user passwords in plain text. This practice poses a security risk as attackers who gain access to local project data can read the passwords...
CVE-2025-0418
Valmet DNA CVE-2025-0418 involves storing user passwords in plain text, as described across multiple sources. The vulnerability affects Valmet DNA where local project data can expose passwords if accessed, implying insufficient protection of credentials in storage. The primary concrete detail ava...
PT-2025-14024 · Valmet · Valmet Dna
Name of the Vulnerable Software and Affected Versions: Valmet DNA affected versions not specified Description: The issue involves storing Valmet DNA user passwords in plain text, which poses a security risk. If attackers gain access to local project data, they can read the passwords...
CVE-2025-2877
Summary: CVE-2025-2877 concerns Red Hat Ansible Automation Platform’s Event-Driven Ansible where, in configurations with verbosity set to debug, inventory passwords are exposed in plain text during rulebook activations and related Event Streams. Affected scope (from connected docs): Red Hat Ansib...
CVE-2025-2877 Event-driven-ansible: exposure inventory passwords in plain text when starting a rulebook activation with verbosity set to debug in eda
A flaw was found in the Ansible Automation Platform's Event-Driven Ansible. In configurations where verbosity is set to "debug", inventory passwords are exposed in plain text when starting a rulebook activation. This issue exists for any "debug" action in a rulebook and also affects Event Streams...
CVE-2025-2877: Debug Messages Revealing Unnecessary Information
A flaw was found in the Ansible Automation Platform's Event-Driven Ansible. In configurations where verbosity is set to "debug", inventory passwords are exposed in plain text when starting a rulebook activation. This issue exists for any "debug" action in a rulebook and also affects Event Streams...
Security Bulletin: IBM Security Directory Suite is vulnerable to multiple issues
Summary Multiple Security Vulnerabilities in the IBM Security Directory Suite have been addressed by code updates and updating the relevant components. Vulnerability Details CVEID:CVE-2022-22475 DESCRIPTION: IBM WebSphere Application Server Liberty and Open Liberty 17.0.0.3 through 22.0.0.5 are...
Security Bulletin: Multiple Vulnerabilities in IBM Security Guardium Key Lifecycle Manager
Summary There are multiple vulnerabilities identified in IBM Security Guardium Key Lifecycle Manager. These vulnerabilties have been fixed in IBM Security Guardium Key Lifecycle Manager v4.2 . Please upgrade to GKLM v4.2 for the fixes. Vulnerability Details CVEID:CVE-2023-25689 DESCRIPTION: IBM...
Security Bulletin: IBM Security Verify Governance stores user credentials in plain clear text which can be read by a local user (CVE-2022-22470)
Summary IBM Security Verify Governance is vulnerable to exposure of user credentials to local users due to storage of credentials in cleartext CVE-2022-22470. This vulnerability has been removed by a code fix. Vulnerability Details CVEID:CVE-2022-22470 DESCRIPTION: IBM Security Verify Governance...
Security Bulletin: Security vulnerabilities have been fixed in IBM Security Verify Governance, Identity Manager virtual appliance component
Summary IBM Security Verify Governance, Identity Manager virtual appliance component has addressed the following vulnerabilities Vulnerability Details CVEID:CVE-2022-22457 DESCRIPTION: IBM Security Verify Governance stores sensitive information including user credentials in plain clear text which...
Security Bulletin: IBM Maximo Mobile is vulnerable to Information Disclosure (CVE-2022-41732)
Summary IBM Maximo Mobile stores user credentials in plain clear text which can be read by a local user. Vulnerability Details CVEID:CVE-2022-41732 DESCRIPTION: IBM Maximo Mobile stores user credentials in plain clear text which can be read by a local user. CVSS Base score: 6.2 CVSS Temporal Scor...
CVE-2024-45638
IBM Security QRadar 3.12 EDR stores user credentials in plain text which can be read by a local privileged user...
CVE-2024-45638
IBM Security QRadar 3.12 EDR stores user credentials in plain text which can be read by a local privileged user...