925 matches found
CVE-2024-31415
The Eaton Foreseer software provides the feasibility for the user to configure external servers for multiple purposes such as network management, user management, etc. The software uses encryption to store these configurations securely on the host machine. However, the keys used for this encrypti...
CVE-2024-31415
The Eaton Foreseer software provides the feasibility for the user to configure external servers for multiple purposes such as network management, user management, etc. The software uses encryption to store these configurations securely on the host machine. However, the keys used for this encrypti...
CVE-2024-31415
The CVE-2024-31415 issue affects Eaton Foreseer EPMS software. The root cause is insecurely stored encryption keys used to protect server configuration data, allowing an attacker with local access to potentially change or remove external server configurations. Public documents describe the vulner...
CVE-2024-31415: Cleartext Storage of Sensitive Information
The Eaton Foreseer software provides the feasibility for the user to configure external servers for multiple purposes such as network management, user management, etc. The software uses encryption to store these configurations securely on the host machine. However, the keys used for this encrypti...
PT-2024-24057
Name of the Vulnerable Software and Affected Versions Eaton Foreseer affected versions not specified Description The issue concerns the insecure storage of encryption keys used by the Eaton Foreseer software to securely store configurations for external servers on the host machine. These...
CVE-2024-45394
Authenticator is a browser extension that generates two-step verification codes. In versions 7.0.0 and below, encryption keys for user data were stored encrypted at-rest using only AES-256 and the EVPBytesToKey KDF. Therefore, attackers with a copy of a user's data are able to brute-force the...
TYPO3 Winstaller Default Encryption Keys
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'TYPO3 Winstaller Default Encryption Keys', 'Description' = %q This module exploits known default encryption keys found in the TYPO3 Winstaller...
PT-2024-9958 · Ca · Ca Client Automation
Name of the Vulnerable Software and Affected Versions: CA Client Automation ITCM affected versions not specified Description: The issue is related to insecure privilege management in the CA Client Automation software, which allows non-admin or non-root users to encrypt strings using the CAF CLI a...
GHSA-6GR4-52W6-VMQX rke's credentials are stored in the RKE1 Cluster state ConfigMap
Impact When RKE provisions a cluster, it stores the cluster state in a configmap called full-cluster-state inside the kube-system namespace of the cluster itself. This cluster state object contains information used to set up the K8s cluster, which may include the following sensitive data: -...
Update: CVE-2024-4577 quickly weaponized to distribute “TellYouThePass” Ransomware
Introduction Recently, Imperva Threat Research reported on attacker activity leveraging the new PHP vulnerability, CVE-2024-4577. From as early as June 8th, we have detected attacker activity leveraging this vulnerability to deliver malware, which we have now identified to be a part of the...
CGA-XPJJ-HV4W-94C5
Bulletin has no description...
Kwik does not discard unused encryption keys
Kwik commit 745fd4e2 does not discard unused encryption keys...
GHSA-W8CP-FRXC-55PJ Kwik does not discard unused encryption keys
Kwik commit 745fd4e2 does not discard unused encryption keys...
CVE-2024-22588
Kwik commit 745fd4e2 does not discard unused encryption keys...
CVE-2024-22588
Kwik commit 745fd4e2 does not discard unused encryption keys...
CVE-2024-22588
The Kwik implementation of the QUIC protocol (RFC 9000) is vulnerable in commit 745fd4e2 . The root cause is that the software does not discard unused encryption keys , which can lead to security risks associated with key retention. To mitigate this issue, users should ensure that unused encrypti...
CVE-2024-22588
Kwik commit 745fd4e2 does not discard unused encryption keys...
CVE-2024-22588
Kwik commit 745fd4e2 does not discard unused encryption keys...