CVE-2015-4057

The "Plug-in for VMware vCenter" in VCE Vision Intelligent Operations before 2.6.5 sends a cleartext HTTP response upon a request for the Settings screen, which allows remote attackers to discover the admin user password by sniffing the network...

CVE-2015-4057

CVE-2015-4057 affects VCE Vision Intelligent Operations prior to 2.6.5. The Plug-in for VMware vCenter exposes the admin password by returning a cleartext HTTP response when the Settings screen is requested, enabling network sniffing attacks to reveal credentials. The underlying issue is cleartex...

CVE-2015-4057: Exposure of Sensitive Information to an Unauthorized Actor

The "Plug-in for VMware vCenter" in VCE Vision Intelligent Operations before 2.6.5 sends a cleartext HTTP response upon a request for the Settings screen, which allows remote attackers to discover the admin user password by sniffing the network...

PT-2017-6726

Name of the Vulnerable Software and Affected Versions VCE Vision Intelligent Operations versions prior to 2.6.5 Description The issue allows remote attackers to discover the admin user password by sniffing the network, due to the "Plug-in for VMware vCenter" sending a cleartext HTTP response upon...

PT-2020-8190

Name of the Vulnerable Software and Affected Versions: LXC version 2.0 Description: The issue concerns the template scripts in LXC that download code over cleartext HTTP without performing a digital-signature check before executing it to bootstrap containers. Recommendations: For LXC version 2.0,...

PT-2016-4589

Name of the Vulnerable Software and Affected Versions portaudio crate versions prior to 0.7.1 Description The issue concerns a man-in-the-middle problem due to the use of cleartext HTTP for downloading the source code. This allows an attacker to intercept the download and potentially achieve remo...

CVE-2011-2344

The CVE concerns Android Picasa in Android 3.0 and 2.x through 2.3.4, where authToken is transmitted over cleartext HTTP from ClientLogin. This allowed remote attackers to sniff tokens from connections to picasaweb.google.com, enabling privilege escalation to access private pictures and web album...

CVE-2011-2344

Android Picasa in Android 3.0 and 2.x through 2.3.4 uses a cleartext HTTP session when transmitting the authToken obtained from ClientLogin, which allows remote attackers to gain privileges and access private pictures and web albums by sniffing the token from connections with picasaweb.google.com...

PT-2011-3785

Name of the Vulnerable Software and Affected Versions Android Picasa versions 2.x through 2.3.4 Android Picasa version 3.0 Description The issue allows remote attackers to gain privileges and access private pictures and web albums by sniffing the authToken from connections with...

CVE-2011-2344: Undefined Security Weakness

Android Picasa in Android 3.0 and 2.x through 2.3.4 uses a cleartext HTTP session when transmitting the authToken obtained from ClientLogin, which allows remote attackers to gain privileges and access private pictures and web albums by sniffing the token from connections with picasaweb.google.com...

CVE-2011-0207

The MobileMe component in Apple Mac OS X before 10.6.8 uses a cleartext HTTP session for the Mail application to read e-mail aliases, which allows remote attackers to obtain potentially sensitive alias information by sniffing the network...

Design/Logic Flaw

The MobileMe component in Apple Mac OS X before 10.6.8 uses a cleartext HTTP session for the Mail application to read e-mail aliases, which allows remote attackers to obtain potentially sensitive alias information by sniffing the network...

CVE-2011-0207

The MobileMe component in Apple Mac OS X before 10.6.8 uses a cleartext HTTP session for the Mail application to read e-mail aliases, which allows remote attackers to obtain potentially sensitive alias information by sniffing the network...

CVE-2011-0207

CVE-2011-0207 affects Apple Mac OS X prior to 10.6.8, specifically the MobileMe component used by Mail. The root cause is the use of a cleartext HTTP session to read e‑mail aliases, allowing an attacker on the same network to sniff traffic and obtain potentially sensitive alias information. Accor...

PT-2011-2187

Name of the Vulnerable Software and Affected Versions Mac OS X versions prior to 10.6.8 Description The issue concerns the MobileMe component in Mac OS X, which uses a cleartext HTTP session for the Mail application to read e-mail aliases. This allows remote attackers to obtain potentially...

CVE-2011-0207: Undefined Security Weakness

The MobileMe component in Apple Mac OS X before 10.6.8 uses a cleartext HTTP session for the Mail application to read e-mail aliases, which allows remote attackers to obtain potentially sensitive alias information by sniffing the network...

CVE-2010-4184

CVE-2010-4184 affects NetSupport Manager (NSM) prior to version 11.00.0005. The vulnerability arises from NSM sending HTTP headers with cleartext fields that reveal details about client machines, enabling an attacker who can sniff network traffic to obtain potentially sensitive information (e.g.,...

CVE-2007-5778: Cleartext Storage of Sensitive Information

Mobile Spy 1 stores login credentials in cleartext under the RetinaxStudios registry key, and 2 sends login credentials and log data over a cleartext HTTP connection, which allows attackers to obtain sensitive information by reading the registry or sniffing the network...