CVE-2022-27544

CVE-2022-27544 affects HCL BigFix Platform (Web Reports): an information disclosure where authorized users can retrieve SMTP credentials in clear text. Root cause is the transfer of SMTP credentials in clear text within Web Reports. Affected product: HCL BigFix Platform/Web Reports. Impact: expos...

CVE-2022-27544 HCL BigFix Web Reports authorized users may see sensitive information in clear text

BigFix Web Reports authorized users may see SMTP credentials in clear text...

CVE-2022-30626

Browsing the path: http://ip/wifiappataget.cmd, will show in the name of the existing access point on the component, and a password in clear text...

CVE-2022-30626

Browsing the path: http://ip/wifiappataget.cmd, will show in the name of the existing access point on the component, and a password in clear text...

Default credentials

Browsing the path: http://ip/wifiappataget.cmd, will show in the name of the existing access point on the component, and a password in clear text...

CVE-2022-30626 Chcnav - P5E GNSS API not secure

Browsing the path: http://ip/wifiappataget.cmd, will show in the name of the existing access point on the component, and a password in clear text...

CVE-2022-30626

CVE-2022-30626 affects Chcnav P5E GNSS API. The vulnerability arises when browsing the path http://ip/wifi_ap_pata_get.cmd, which causes the name of the existing access point and a password to be shown in clear text. Documented in NVD/NVD-derived entries, this results in password exposure but no ...

CVE-2022-27544

BigFix Web Reports authorized users may see SMTP credentials in clear text...

Chcnav P5E GNSS 安全漏洞

Chcnav P5E GNSS is a global positioning system from Chcnav. A security vulnerability exists in Chcnav P5E GNSS that stems from an insecure P5E GNSS API that displays passwords in clear text...

Security Bulletin: IBM Urbancode Deploy (UCD) vulnerable to information disclosure which can be read by a local user. (CVE-2022-22366)

Summary Diagnostic records may contain values used to perform remote creation of ssh agents. Vulnerability Details CVEID:CVE-2022-22366 DESCRIPTION: IBM UrbanCode Deploy UCD stores user credentials in plain clear text which can be read by a local user. CVSS Base score: 4.9 CVSS Temporal Score: Se...

CVE-2022-27548

HCL Launch stores user credentials in plain clear text which can be read by a local user...

Design/Logic Flaw

HCL Launch stores user credentials in plain clear text which can be read by a local user...

Design/Logic Flaw

A vulnerability in the logging component of Cisco TelePresence Collaboration Endpoint CE and RoomOS Software could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. This vulnerability is due to the storage of certain unencrypted credentials...

CVE-2022-20768 Cisco TelePresence Collaboration Endpoint and RoomOS Software Information Disclosure Vulnerability

A vulnerability in the logging component of Cisco TelePresence Collaboration Endpoint CE and RoomOS Software could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. This vulnerability is due to the storage of certain unencrypted credentials...

Cisco TelePresence Collaboration Endpoint and RoomOS Software Information Disclosure Vulnerability

A vulnerability in the logging component of Cisco TelePresence Collaboration Endpoint CE and RoomOS Software could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. This vulnerability is due to the storage of certain unencrypted credentials...

CVE-2022-22366

IBM UrbanCode Deploy UCD 6.2.7.15, 7.0.5.10, 7.1.2.6, and 7.2.2.1 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 22106...

CVE-2022-22478

IBM Spectrum Protect Client 8.1.0.0 through 8.1.14.0 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 225886...

CVE-2021-40642

Textpattern CMS v4.8.7 and older vulnerability exists through Sensitive Cookie in HTTPS Session Without 'Secure' Attribute via textpattern/lib/txplibmisc.php. The secure flag is not set for txplogin session cookie in the application. If the secure flag is not set, then the cookie will be...

CVE-2021-40642

Textpattern CMS v4.8.7 and older vulnerability exists through Sensitive Cookie in HTTPS Session Without 'Secure' Attribute via textpattern/lib/txplibmisc.php. The secure flag is not set for txplogin session cookie in the application. If the secure flag is not set, then the cookie will be...

CVE-2021-40642

Textpattern CMS v4.8.7 and older vulnerability exists through Sensitive Cookie in HTTPS Session Without 'Secure' Attribute via textpattern/lib/txplibmisc.php. The secure flag is not set for txplogin session cookie in the application. If the secure flag is not set, then the cookie will be...