924 matches found
CVE-2007-6096
Ingate Firewall before 4.6.0 and SIParator before 4.6.0 store passwords for “administrators with less privileges” in cleartext, enabling possible reading by an attacker via unspecified vectors. Affected components are the password storage mechanism; root cause indicated as cleartext storage. No e...
CVE-2007-5576
BEA Tuxedo 8.0 before RP392 and 8.1 before RP293, and WebLogic Enterprise 5.1 before RP174, echo the password in cleartext, which allows physically proximate attackers to obtain sensitive information via the 1 cnsbind, 2 cnsunbind, or 3 cnsls commands...
Information disclosure
Microsoft Expression Media stores the catalog password in cleartext in the catalog IVC file, which allows local users to obtain sensitive information and gain access to the catalog by reading the IVC file...
CVE-2007-4786
Cisco ASA/PIX: The vulnerability affects ASA versions 7.0–7.0.7.1, 7.1–7.1.2.61, 7.2–7.2.2.34, and 8.0–8.0.2.11 when AAA is enabled. The issue arises from the system composing %ASA-5-111008 messages using the output of the "test aaa" command, which includes cleartext passwords, and sending them t...
Design/Logic Flaw
IBM Lotus Notes 5.x through 7.0.2 allows user-assisted remote authenticated administrators to obtain a cleartext notes.id password by setting the notes.ini 1 KFMShowEntropy and 2 DebugOutfile debug variables, a different vulnerability than CVE-2005-2696...
Default credentials
The Jedox Palo 1.5 client transmits the password in cleartext, which might allow remote attackers to obtain the password by sniffing the network, as demonstrated by starting Excel with the Palo plugin, opening a cube, and performing an Insert View...
CVE-2007-3087
Peercast places a cleartext password in a query string, which might allow attackers to obtain sensitive information by sniffing the network, or obtaining Referer or browser history information...
Information disclosure
Peercast places a cleartext password in a query string, which might allow attackers to obtain sensitive information by sniffing the network, or obtaining Referer or browser history information...
CVE-2007-3087
Peercast is affected by CVE-2007-3087. The vulnerability arises because Pegercast places a cleartext password in a query string, enabling potential disclosure of sensitive data if an attacker can sniff network traffic or access Referer/browser history information. The connected documents confirm ...
CVE-2007-3087
Peercast places a cleartext password in a query string, which might allow attackers to obtain sensitive information by sniffing the network, or obtaining Referer or browser history information...
2007-06-03: PeerCast streaming server submits cleartext password
Hi there, peercast also submits the configured password in cleartext. e.g. http://www.domain.tld:7144/admin?cmd=login&pass=asdfg.jodi.org&submit=Login well, I have just played a bit around with it, so I assume this is already known. Solution might be to use stunnel. Have Fun : Greetz mpeg...
OpenVMS multiple security vulnerabilities
HP DecNet-Plus undisclosured vulnerability, cleartext password in log files...
CVE-2006-6258
The phpmyadmin subsystem in AlternC 0.9.5 and earlier transmits the SQL password in cleartext in a cookie, which might allow remote attackers to obtain the password by sniffing or by conducting a cross-site scripting XSS attack...
CVE-2006-5018
ContentKeeper 123.25 and earlier stores passwords in cleartext in an INPUT element within cgi-bin/ck/changepw.cgi, enabling remote authenticated users to obtain passwords via that URI. The vuln is exploitable over network with low complexity and requires authentication, leading to partial confide...
CVE-2006-5018
ContentKeeper 123.25 and earlier places passwords in cleartext in an INPUT element in cgi-bin/ck/changepw.cgi, which allows remote authenticated users to obtain passwords via this URI...
ContentKeeper information leak
HTML web administration page contains administrator's password in cleartext...
Multiple Novell eDirectory security vulnerabilities
Remote Denial of Service, cleartext password in log files...
VMWare ESX Server crossite scripting and password leak
Management Interface crossite scripting. Additionally, cleartext password is contained in session cookie and server log files...
Low: Red Hat Bug Fix Advisory: conga bug fix update
Updated conga packages that provide critical bug fixes are now available. The Conga package is a web-based administration tool for remote cluster and storage management. This erratum applies the following bug fixes: - The borrowed Zope packages used by Conga have been patched to eliminate a...