ceph: mgr modules' passwords are in clear text in mgr logs

A flaw was found in Ceph where Ceph stores mgr module passwords in clear text. This issue can be found by searching the mgr logs for Grafana and dashboard, with passwords visible. The highest threat from this vulnerability is to confidentiality...

CVE-2020-21994

AVE DOMINAplus =1.10.x suffers from clear-text credentials disclosure vulnerability that allows an unauthenticated attacker to issue a request to an unprotected directory that hosts an XML file '/xml/authClients.xml' and obtain administrative login information that allows for a successful...

CVE-2020-21994

AVE DOMINAplus =1.10.x suffers from clear-text credentials disclosure vulnerability that allows an unauthenticated attacker to issue a request to an unprotected directory that hosts an XML file '/xml/authClients.xml' and obtain administrative login information that allows for a successful...

CVE-2020-21994

AVE DOMINAplus =1.10.x suffers from clear-text credentials disclosure vulnerability that allows an unauthenticated attacker to issue a request to an unprotected directory that hosts an XML file '/xml/authClients.xml' and obtain administrative login information that allows for a successful...

CVE-2020-21994

CVE-2020-21994 affects AVE DOMINAplus <= 1.10.x. The issue is a clear-text credentials disclosure where an unauthenticated attacker can access an unprotected directory hosting /xml/authClients.xml and obtain administrative login information, enabling a authentication bypass. Reported as high-s...

Samsung Email Information Disclosure Vulnerability (CNVD-2021-30495)

Samsung Email application is a cell phone application from Samsung South Korea. It provides the function of sending and receiving e-mail. A security vulnerability exists in Samsung Email versions prior to 6.1.41.0, which originates from leaking messages in certain mailboxes in clear text. No...

Security Bulletin: IBM Resilient – Password in Clear Text (CVE-2016-6064)

Summary Security Bulletin: IBM Resilient – Password in Clear Text CVE-2016-6064 Vulnerability Details Title Security Bulletin: IBM Resilient – Password in Clear Text CVE-2016-6064 Summary The software stores user or system passwords unencrypted which can allow attackers with file system access or...

CVE-2021-23884 Clear text exposure of password in McAfee CSR ePO extension

Cleartext Transmission of Sensitive Information vulnerability in the ePO Extension of McAfee Content Security Reporter CSR prior to 2.8.0 allows an ePO administrator to view the unencrypted password of the McAfee Web Gateway MWG or the password of the McAfee Web Gateway Cloud Server MWGCS read on...

Design/Logic Flaw

A clear text storage of sensitive information into log file vulnerability in FortiADCManager 5.3.0 and below, 5.2.1 and below and FortiADC 5.3.7 and below may allow a remote authenticated attacker to read other local users' password in log files...

CVE-2021-24024

A clear text storage of sensitive information into log file vulnerability in FortiADCManager 5.3.0 and below, 5.2.1 and below and FortiADC 5.3.7 and below may allow a remote authenticated attacker to read other local users' password in log files...

CVE-2021-24024

A clear text storage of sensitive information into log file vulnerability in FortiADCManager 5.3.0 and below, 5.2.1 and below and FortiADC 5.3.7 and below may allow a remote authenticated attacker to read other local users' password in log files...

Samsung Email 信息泄露漏洞

Samsung Email application is a cell phone application from Samsung South Korea. It provides the function of sending and receiving e-mail. A security vulnerability exists in Samsung Email versions prior to 6.1.41.0, which originates from leaking messages in certain mailboxes in clear text. No...

OESA-2021-1100 ceph security update

Ceph is a massively scalable, open-source, distributed storage system that runs on commodity hardware and delivers object, block and file system storage. Security Fixes: A flaw was found in ceph in versions prior to 16.y.z where ceph stores mgr module passwords in clear text. This can be found by...

Fortinet FortiADC 日志信息泄露漏洞

Fortinet FortiADC is an application delivery controller from Fortinet, Inc. A security vulnerability exists in FortiADCManager that originates from the insertion of a user's password into a log file in clear text. An attacker could exploit this vulnerability to obtain sensitive information...

Clear-text insertion of user's passwords into log files

...

CVE-2021-3429

A flaw was found in cloud-init. When a system is configured through cloud-init and the "Set Passwords" module is used with "chpasswd" directive and "RANDOM", the randomly generated password for the relative user is written in clear-text in a file readable by any existing user of the system. The...

MicroSeven MYM71080i-B 安全漏洞

The MicroSeven MYM71080i-B is a camera firmware from MicroSeven, USA. A security vulnerability exists in MicroSeven MYM71080i-B 2.0.5 through 2.0.20, which originates from sending administrative credentials in clear text to pnp.microseven.com TCP port 7007...

CVE-2019-18231

Advantech Spectre RT ERT351 Versions 5.1.3 and prior logins and passwords are transmitted in clear text form, which may allow an attacker to intercept the request...

CVE-2019-18231

Advantech Spectre RT ERT351 Versions 5.1.3 and prior logins and passwords are transmitted in clear text form, which may allow an attacker to intercept the request...

Server side request forgery (ssrf)

Advantech Spectre RT ERT351 Versions 5.1.3 and prior logins and passwords are transmitted in clear text form, which may allow an attacker to intercept the request...