CVE-2022-28161

An information exposure through log file vulnerability in Brocade SANNav versions before Brocade SANnav 2.2.0 could allow an authenticated, local attacker to view sensitive information such as ssh passwords in filetansfer.log in debug mode. To exploit this vulnerability, the attacker would need t...

Code injection

An information exposure through log file vulnerability in Brocade SANNav versions before Brocade SANnav 2.2.0 could allow an authenticated, local attacker to view sensitive information such as ssh passwords in filetansfer.log in debug mode. To exploit this vulnerability, the attacker would need t...

CVE-2022-28161

An information exposure through log file vulnerability in Brocade SANNav versions before Brocade SANnav 2.2.0 could allow an authenticated, local attacker to view sensitive information such as ssh passwords in filetansfer.log in debug mode. To exploit this vulnerability, the attacker would need t...

CVE-2022-28161

CVE-2022-28161 affects Brocade SANNav prior to 2.2.0. The vulnerability is an information exposure through log files (debug mode) that could allow an authenticated, local attacker to view sensitive data such as SSH passwords stored in filetansfer.log when debug is enabled. Exploitation requires v...

CVE-2022-28161: Insertion of Sensitive Information into Log File

An information exposure through log file vulnerability in Brocade SANNav versions before Brocade SANnav 2.2.0 could allow an authenticated, local attacker to view sensitive information such as ssh passwords in filetansfer.log in debug mode. To exploit this vulnerability, the attacker would need t...

PT-2022-18860

Name of the Vulnerable Software and Affected Versions Brocade SANNav versions prior to 2.2.0 Description An information exposure through log file vulnerability could allow an authenticated, local attacker to view sensitive information such as ssh passwords in filetansfer.log in debug mode. To...

Broadcom Brocade SANnav log information leakage vulnerability

Broadcom Brocade SANnav is a suite of SAN management platforms from Broadcom USA. A security vulnerability exists in Broadcom Brocade SANNav versions prior to 2.2.0, which can be exploited by an authenticated local attacker to view sensitive information in debug mode...

Glovo: Django debug enabled showing information about system, database, configuration files

Summary: Hi team, This subdomain pulpo.it.glovoint.com is a Django application running with debug mode turned on DEBUG = True . One of the main features of debug mode is the display of detailed error pages to help developers. If your app raises an exception when DEBUG is True, Django will display...

BSA-2022-1840

Security Advisory ID : BSA-2022-1840 Component : debug mode Revision : 1.0 An information exposure through log file vulnerability in Brocade SANNav versions before Brocade SANnav 2.2.0 could allow an authenticated, local attacker to view sensitive information such as ssh passwords in...

WordPress Quick Contact Form plugin < 8.0.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Quick Contact Form plugin versions 8.0.2. Solution Update the WordPress Quick Contact Form plugin to the latest available version at least 8.0.2...

WordPress Salon booking system plugin <= 7.6.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Salon booking system plugin versions = 7.6.1. Solution Update the WordPress Salon booking system plugin to the latest available version at least 7.6.3...

WordPress Yet Another Stars Rating plugin < 3.0.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Yet Another Stars Rating plugin versions 3.0.2. Solution Update the WordPress Yet Another Stars Rating plugin to the latest available version at least 3.0.2...

WordPress Advance Search for WooCommerce plugin <= 2.0.3 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Advance Search for WooCommerce plugin versions = 2.0.3. Solution No patched version available...

WordPress WooCommerce Product Attachment plugin <= 2.1.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WooCommerce Product Attachment plugin versions = 2.1.2. Solution Update the WordPress WooCommerce Product Attachment plugin to the latest available version at least 2.1.3...

WordPress FooBox Image Lightbox plugin < 2.7.17 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress FooBox Image Lightbox plugin versions 2.7.17. Solution Update the WordPress FooBox Image Lightbox plugin to the latest available version at least 2.7.17...

WordPress WooCommerce Quick Reports plugin <= 2.7.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WooCommerce Quick Reports plugin versions = 2.7.1. Solution No patched version available...

WordPress Woocommerce Blocker Lite plugin <= 2.0.3 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Woocommerce Blocker Lite plugin versions = 2.0.3. Solution Update the WordPress Woocommerce Blocker Lite plugin to the latest available version at least 2.1.0...

WordPress WP Mobile Menu plugin <= 2.8.2.6 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WP Mobile Menu plugin versions = 2.8.2.6. Solution Update the WordPress WP Mobile Menu plugin to the latest available version at least 2.8.2.7...

WordPress Ocean Extra plugin < 1.9.4 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Ocean Extra plugin versions 1.9.4. Solution Update the WordPress Ocean Extra plugin to the latest available version at least 1.9.4...

WordPress Elementor Addon Elements plugin < 1.11.14 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Elementor Addon Elements plugin versions 1.11.14. Solution Update the WordPress Elementor Addon Elements plugin to the latest available version at least 1.11.14...