CVE-2023-44155

Sensitive information leak through log files. The following products are affected: Acronis Cyber Protect 15 Linux, Windows before build 35979...

CVE-2023-44155

Sensitive information leak through log files. The following products are affected: Acronis Cyber Protect 15 Linux, Windows before build 35979...

CVE-2023-44155

CVE-2023-44155 affects Acronis Cyber Protect 15 prior to build 35979. The issue is a sensitive information leak via log files in the product. Affected platforms include Linux and Windows. Root cause details are not elaborated in the provided documents, but related sources consistently tie the vul...

PT-2023-5670 · Acronis · Acronis Cyber Protect 15 +1

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect 15 versions before build 35979 Description: The issue is related to a sensitive information leak through log files. This could allow an attacker to gain unauthorized access to protected information. Recommendations: For...

Acronis Cyber Protect Security Vulnerability

Acronis Cyber Protect is an all-in-one cyber protection solution for business and enterprise from Acronis Singapore. It combines backup, anti-malware, cybersecurity and endpoint management features such as vulnerability assessment, URL filtering, patch management, and more. A security vulnerabili...

CVE-2023-4528: Java Deserialization Vulnerability in JSCAPE MFT (Fixed)

In August 2023, Rapid7 discovered a Java deserialization vulnerability in Redwood Software’s JSCAPE MFT secure managed file transfer product. The vulnerability was later assigned CVE-2023-4528. It can be exploited by sending an XML-encoded Java object to the Manager Service port, which, by defaul...

Information Disclosure

@apollo/server and apollo-server-core are vulnerable to Information Disclosure. The vulnerability is due to a lack sensitive information masking such as Studio API keys which can end up getting logged if they are passed incorrectly with leading/trailing whitespace or if they have any invalid...

CVE-2023-4688

Sensitive information leak through log files. The following products are affected: Acronis Agent Linux, macOS, Windows before build 35433...

CVE-2023-4688

Sensitive information leak through log files. The following products are affected: Acronis Agent Linux, macOS, Windows before build 35433...

Information disclosure

Sensitive information leak through log files. The following products are affected: Acronis Agent Linux, macOS, Windows before build 35433...

CVE-2023-4688

The CVE-2023-4688 entry affects Acronis Agent on Linux, macOS, and Windows, with vulnerable prior to build 35433. Root cause cited across connected docs is insufficient protection of registration data, producing a sensitive information leak via log files. Impact is described as disclosure of logs...

CVE-2023-4688

Sensitive information leak through log files. The following products are affected: Acronis Agent Linux, macOS, Windows before build 35433...

CVE-2023-4688

Sensitive information leak through log files. The following products are affected: Acronis Agent Linux, macOS, Windows before build 35433...

CVE-2023-31925

Brocade SANnav before v2.3.0 and v2.2.2a stores SNMPv3 Authentication passwords in plaintext. A privileged user could retrieve these credentials with knowledge and access to these log files. SNMP credentials could be seen in SANnav SupportSave if the capture is performed after an SNMP configurati...

CVE-2023-31925

Brocade SANnav before v2.3.0 and v2.2.2a stores SNMPv3 Authentication passwords in plaintext. A privileged user could retrieve these credentials with knowledge and access to these log files. SNMP credentials could be seen in SANnav SupportSave if the capture is performed after an SNMP configurati...

Design/Logic Flaw

Brocade SANnav before v2.3.0 and v2.2.2a stores SNMPv3 Authentication passwords in plaintext. A privileged user could retrieve these credentials with knowledge and access to these log files. SNMP credentials could be seen in SANnav SupportSave if the capture is performed after an SNMP configurati...

CVE-2023-31925 Storage of clear text password in Brocade SANnav

Brocade SANnav before v2.3.0 and v2.2.2a stores SNMPv3 Authentication passwords in plaintext. A privileged user could retrieve these credentials with knowledge and access to these log files. SNMP credentials could be seen in SANnav SupportSave if the capture is performed after an SNMP configurati...

CVE-2023-31925 Storage of clear text password in Brocade SANnav

Brocade SANnav before v2.3.0 and v2.2.2a stores SNMPv3 Authentication passwords in plaintext. A privileged user could retrieve these credentials with knowledge and access to these log files. SNMP credentials could be seen in SANnav SupportSave if the capture is performed after an SNMP configurati...

CVE-2023-4571

In Splunk IT Service Intelligence ITSI versions below below 4.13.3, 4.15.3, or 4.17.1, a malicious actor can inject American National Standards Institute ANSI escape codes into Splunk ITSI log files that, when a vulnerable terminal application reads them, can run malicious code in the vulnerable...

Splunk 注入漏洞

Splunk is a suite of data collection and analysis software from Splunk, Inc. It is used to collect, index, and analyze and the data it generates, including data generated by all IT systems and infrastructures physical, virtual machines, and cloud. Splunk has an injection vulnerability that stems...