Lucene search
+L

1794 matches found

Github Security Blog
Github Security Blog
•added 2021/05/18 6:28 p.m.•80 views

Hard coded cryptographic key in Kiali

A hard-coded cryptographic key vulnerability in the default configuration file was found in Kiali, all versions prior to 1.15.1. A remote attacker could abuse this flaw by creating their own JWT signed tokens and bypass Kiali authentication mechanisms, possibly gaining privileges to view and alte...

8.6CVSS8.4AI score0.03468EPSS
SaveExploits2References10Affected Software1
Prion
Prion
•added 2021/05/05 4:15 p.m.•30 views

Hardcoded credentials

IBM QRadar SIEM 7.3 and 7.4 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 191748...

4.6CVSS7.4AI score0.00172EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2021/05/05 4:15 p.m.•34 views

Hardcoded credentials

IBM QRadar SIEM 7.3 and 7.4 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 196075...

4.6CVSS7.4AI score0.00155EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/22 12:00 a.m.•8 views

CVE-2021-0266: Use of Hard-coded Cryptographic Key

The use of multiple hard-coded cryptographic keys in cSRX Series software in Juniper Networks Junos OS allows an attacker to take control of any instance of a cSRX deployment through device management services. This issue affects: Juniper Networks Junos OS on cSRX Series: All versions prior to...

9.8CVSS5.7AI score0.0088EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/22 12:00 a.m.•5 views

CVE-2021-27392: Use of Hard-coded Cryptographic Key

A vulnerability has been identified in Siveillance Video Open Network Bridge 2020 R3, Siveillance Video Open Network Bridge 2020 R2, Siveillance Video Open Network Bridge 2020 R1, Siveillance Video Open Network Bridge 2019 R3, Siveillance Video Open Network Bridge 2019 R2, Siveillance Video Open...

8.8CVSS5.8AI score0.01183EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/22 12:00 a.m.•9 views

CVE-2021-27389: Use of Hard-coded Cryptographic Key

A vulnerability has been identified in Opcenter Quality All versions V12.2, QMS Automotive All versions V12.30. A private sign key is shipped with the product without adequate protection...

9.8CVSS5.6AI score0.0103EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/04/13 12:00 a.m.•8 views

PT-2021-7732

Name of the Vulnerable Software and Affected Versions Opcenter Quality versions prior to V12.2 QMS Automotive versions prior to V12.30 Description A vulnerability has been identified related to the use of a hardcoded cryptographic key. This issue is associated with inadequate protection of a...

10CVSS0.0103EPSS
SaveExploits0References4
ICS
ICS
•added 2021/04/13 12:00 a.m.•86 views

Siemens and Milestone Siveillance Video Open Network Bridge

1. EXECUTIVE SUMMARY CVSS v3 9.9 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens and Milestone Equipment: Siveillance Video Open Network Bridge ONVIF Vulnerability: Use of Hard-coded Cryptographic Key 2. RISK EVALUATION Successful exploitation of this vulnerability could...

8.8CVSS9AI score0.01183EPSS
SaveExploits0References11
NVD
NVD
•added 2021/04/02 3:15 p.m.•32 views

CVE-2021-28123

Undocumented Default Cryptographic Key Vulnerability in Cohesity DataPlatform version 6.3 prior 6.3.1g, 6.4 up to 6.4.1c and 6.5.1 through 6.5.1b. The ssh key can provide an attacker access to the linux system in the affected version...

9.8CVSS0.01428EPSS
SaveExploits0References1
Prion
Prion
•added 2021/04/02 3:15 p.m.•32 views

Default credentials

Undocumented Default Cryptographic Key Vulnerability in Cohesity DataPlatform version 6.3 prior 6.3.1g, 6.4 up to 6.4.1c and 6.5.1 through 6.5.1b. The ssh key can provide an attacker access to the linux system in the affected version...

7.5CVSS9.2AI score0.01428EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/04/02 2:46 p.m.•40 views

CVE-2021-28123

Undocumented Default Cryptographic Key Vulnerability in Cohesity DataPlatform version 6.3 prior 6.3.1g, 6.4 up to 6.4.1c and 6.5.1 through 6.5.1b. The ssh key can provide an attacker access to the linux system in the affected version...

9.5AI score0.01428EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2021/03/30 6:15 p.m.•19 views

CVE-2021-26579

A security vulnerability in HPE Unified Data Management UDM could allow the local disclosure of privileged information CWE-321: Use of Hard-coded Cryptographic Key in a product. HPE has provided updates to versions 1.2009.0 and 1.2101.0 of HPE Unified Data Management UDM. Version 1.2103.0 of HPE...

5.5CVSS6.1AI score0.00211EPSS
SaveExploits0References1
Prion
Prion
•added 2021/03/30 6:15 p.m.•34 views

Hardcoded credentials

A security vulnerability in HPE Unified Data Management UDM could allow the local disclosure of privileged information CWE-321: Use of Hard-coded Cryptographic Key in a product. HPE has provided updates to versions 1.2009.0 and 1.2101.0 of HPE Unified Data Management UDM. Version 1.2103.0 of HPE...

2.1CVSS5.2AI score0.00211EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2021/03/30 5:27 p.m.•105 views

CVE-2021-26579

CVE-2021-26579 describes a vulnerability in HPE Unified Data Management (UDM) where a hard-coded cryptographic key in the product can lead to local disclosure of privileged information (CWE-321). The issue is addressed by HPE in UDM versions, with updates to 1.2009.0 and 1.2101.0, and a cleanup i...

5.5CVSS5.2AI score0.00211EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/03/30 5:27 p.m.•43 views

CVE-2021-26579

A security vulnerability in HPE Unified Data Management UDM could allow the local disclosure of privileged information CWE-321: Use of Hard-coded Cryptographic Key in a product. HPE has provided updates to versions 1.2009.0 and 1.2101.0 of HPE Unified Data Management UDM. Version 1.2103.0 of HPE...

5.5AI score0.00211EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/30 12:00 a.m.•10 views

CVE-2021-26579: Use of Hard-coded Credentials

A security vulnerability in HPE Unified Data Management UDM could allow the local disclosure of privileged information CWE-321: Use of Hard-coded Cryptographic Key in a product. HPE has provided updates to versions 1.2009.0 and 1.2101.0 of HPE Unified Data Management UDM. Version 1.2103.0 of HPE...

5.5CVSS5.8AI score0.00211EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
•added 2021/03/09 6:38 p.m.•23 views

Security Bulletin: IBM Verify Gateway does not hide a cryptographic key in one of its binary files (CVE-2020-4385)

Summary In one of the binary files distributed with the IBM Verify Gateway IVG components, it's possible to locate a hard-coded cryptographic key that's passed as an argument to an encryption function. As of v1.0.1 of IVG for RADIUS and IVG for AIX PAM, and v1.0.2 of IVG for Linux PAM and IVG for...

9.8CVSS0.7AI score0.01248EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2021/03/03 5:15 p.m.•30 views

CVE-2021-20442

IBM Security Verify Bridge contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 196618...

7.5CVSS0.0101EPSS
SaveExploits0References2
Prion
Prion
•added 2021/03/03 5:15 p.m.•33 views

Hardcoded credentials

IBM Security Verify Bridge contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 196618...

5CVSS7.3AI score0.0101EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2021/03/03 5:00 p.m.•36 views

CVE-2021-20442

IBM Security Verify Bridge contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 196618...

5.9CVSS7.4AI score0.0101EPSS
SaveExploits0References2
Rows per page
Query Builder