2285 matches found
PT-2013-6221
Name of the Vulnerable Software and Affected Versions ZippyYum Subway CA Kiosk app version 3.4 Description The issue concerns the use of cleartext storage in SQLite cache databases. This allows attackers to obtain sensitive information by reading data elements, such as password elements...
CVE-2013-6986: Undefined Security Weakness
The ZippyYum Subway CA Kiosk app 3.4 for iOS uses cleartext storage in SQLite cache databases, which allows attackers to obtain sensitive information by reading data elements, as demonstrated by password elements...
CVE-2013-3687
AirLive POE2600HD, POE250HD, POE200HD, OD-325HD, OD-2025HD, OD-2060HD, POE100HD, and possibly other camera models use cleartext to store sensitive information, which allows attackers to obtain passwords, user names, and other sensitive information by reading an unspecified backup file...
EUVD-2013-3620
AirLive POE2600HD, POE250HD, POE200HD, OD-325HD, OD-2025HD, OD-2060HD, POE100HD, and possibly other camera models use cleartext to store sensitive information, which allows attackers to obtain passwords, user names, and other sensitive information by reading an unspecified backup file...
CVE-2013-3687: Undefined Security Weakness
AirLive POE2600HD, POE250HD, POE200HD, OD-325HD, OD-2025HD, OD-2060HD, POE100HD, and possibly other camera models use cleartext to store sensitive information, which allows attackers to obtain passwords, user names, and other sensitive information by reading an unspecified backup file...
PT-2013-4565
Name of the Vulnerable Software and Affected Versions AirLive POE2600HD, POE250HD, POE200HD, OD-325HD, OD-2025HD, OD-2060HD, POE100HD affected versions not specified Description The issue concerns the storage of sensitive information in cleartext, allowing attackers to obtain passwords, user name...
PT-2013-4501
Name of the Vulnerable Software and Affected Versions Baramundi Management Suite versions 7.5 through 8.9 Description The issue allows remote attackers to obtain sensitive information by sniffing the network, and allows context-dependent attackers to obtain sensitive information by reading a file...
Design/Logic Flaw
EMC VPLEX before VPLEX GeoSynchrony 5.2 SP1 uses cleartext for storage of the LDAP/AD bind password, which allows local users to obtain sensitive information by reading the management-server configuration file...
PT-2013-4274
Name of the Vulnerable Software and Affected Versions EMC VPLEX versions prior to VPLEX GeoSynchrony 5.2 SP1 Description The issue allows local users to obtain sensitive information by reading the management-server configuration file, as the LDAP/AD bind password is stored in cleartext...
CVE-2012-0706
CVE-2012-0706 affects IBM Scale Out NAS (SONAS) 1.3 prior to 1.3.2.3. The embedded LDAP client stores LDAP bind DN and password in cleartext on the local filesystem, enabling an attacker with root access to obtain credentials and potentially access the external LDAP server. IBM notes no vendor fi...
CVE-2012-0706
IBM Scale Out Network Attached Storage SONAS 1.3 before 1.3.2.3 requires cleartext storage of LDAP credentials without recommending a less privileged LDAP account, which might allow attackers to obtain sensitive server information by leveraging root access to a client machine...
CVE-2012-0706: Undefined Security Weakness
IBM Scale Out Network Attached Storage SONAS 1.3 before 1.3.2.3 requires cleartext storage of LDAP credentials without recommending a less privileged LDAP account, which might allow attackers to obtain sensitive server information by leveraging root access to a client machine...
PT-2013-1511
Name of the Vulnerable Software and Affected Versions IBM Scale Out Network Attached Storage SONAS versions 1.3 through 1.3.2.3 excluding 1.3.2.3 and later Description The issue allows attackers to potentially obtain sensitive server information by leveraging root access to a client machine, due ...
CVE-2011-4723: Cleartext Storage of Sensitive Information
The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecified vectors...
CVE-2011-3429: Undefined Security Weakness
The Settings component in Apple iOS before 5 stores a cleartext parental-restrictions passcode in an unspecified file, which might allow physically proximate attackers to obtain sensitive information by reading this file...
Default credentials
The MartiniCreations PassmanLite Password Manager application before 1.48 for Android stores the master password and unspecified other account information in cleartext, which allows local users to obtain sensitive information by leveraging shell access...
CVE-2011-1840
CVE-2011-1840 affects the MartiniCreations PassmanLite Password Manager for Android prior to version 1.48. The master password (and unspecified other account data) is stored in cleartext, enabling local users with shell access to obtain sensitive information. The vulnerability is local in scope w...
CVE-2011-1840: Undefined Security Weakness
The MartiniCreations PassmanLite Password Manager application before 1.48 for Android stores the master password and unspecified other account information in cleartext, which allows local users to obtain sensitive information by leveraging shell access...
PT-2011-3402
Name of the Vulnerable Software and Affected Versions PassmanLite Password Manager version 1.47 and earlier Description The issue allows local users to obtain sensitive information, including the master password and other account information, by leveraging shell access. This is because the...
CVE-2010-4311
The CVE-2010-4311 entry concerns Free Simple Software 1.0, where passwords are stored in cleartext, enabling an attacker to disclose sensitive information. This information is corroborated by NVD entries describing cleartext password storage. The available connected documents do not specify affec...