CVE-2024-27157 Leak of authentication sessions in secure logs

The sessions are stored in clear-text logs. An attacker can retrieve authentication sessions. A remote attacker can retrieve the credentials and bypass the authentication mechanism. As for the affected products/models/versions, see the reference URL...

CVE-2024-27157

CVE-2024-27157 affects Toshiba e-STUDIO MFPs. The vulnerability involves authentication sessions being stored in clear-text logs, enabling an observer with access to the logs to retrieve sessions and credentials, potentially bypassing authentication. Impact details are described across multiple s...

CVE-2024-27156 Leak of authentication sessions in secure logs

The session cookies, used for authentication, are stored in clear-text logs. An attacker can retrieve authentication sessions. A remote attacker can retrieve the credentials and bypass the authentication mechanism. As for the affected products/models/versions, see the reference URL...

CVE-2024-27156

CVE-2024-27156 affects Toshiba e‑STUDIO/MFP devices. The root cause is that authentication cookies are logged in plaintext, allowing an attacker with access to the device or logs to recover sessions and potentially credentials, bypassing authentication. Public references (NVD/NPD and vendor advis...

CVE-2024-27156 Leak of authentication sessions in secure logs

The session cookies, used for authentication, are stored in clear-text logs. An attacker can retrieve authentication sessions. A remote attacker can retrieve the credentials and bypass the authentication mechanism. As for the affected products/models/versions, see the reference URL...

CVE-2024-27154 Passwords are stored in clear-text logs.

Passwords are stored in clear-text logs. An attacker can retrieve passwords. As for the affected products/models/versions, see the reference URL...

CVE-2024-27154 Passwords are stored in clear-text logs.

Passwords are stored in clear-text logs. An attacker can retrieve passwords. As for the affected products/models/versions, see the reference URL...

CVE-2024-27154

CVE-2024-27154 affects Toshiba multi-function printers (notably Toshiba e-STUDIO MFPs). The issue is that passwords are stored in clear-text logs, enabling an attacker with log access to retrieve passwords. Exploitation status is not documented in the provided sources. Impact is limited to disclo...

PT-2024-21713 · Toshiba Tec · Toshiba Tec E-Studio Multi-Function Peripheral +35

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves admin cookies being written in clear-text in logs. This allows an attacker to retrieve the cookies and bypass the authentication...

PT-2024-21688 · Toshiba Tec · Toshiba Tec E-Studio Multi-Function Peripheral

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The session cookies used for authentication are stored in clear-text logs. This allows an attacker to retrieve authentication sessions. A remote attacke...

CVE-2024-0095

NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where a user can inject forged logs and executable commands by injecting arbitrary data as a new log entry. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of...

CVE-2024-0095

NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where a user can inject forged logs and executable commands by injecting arbitrary data as a new log entry. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of...

CVE-2024-0095 CVE

NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where a user can inject forged logs and executable commands by injecting arbitrary data as a new log entry. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of...

CVE-2024-0095

CVE-2024-0095 affects NVIDIA Triton Inference Server for Linux and Windows. The issue allows a user to inject forged logs and executable commands by inserting arbitrary data as a new log entry, with potential consequences including code execution, denial of service, privilege escalation, informat...

CVE-2024-0095 CVE

NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where a user can inject forged logs and executable commands by injecting arbitrary data as a new log entry. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of...

CVE-2024-38285

CVE-2024-38285 affects Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600) and related firmware versions up to 3.1.171.9. The vulnerability is insufficient protection of logs that store credentials, which can be decoded with open source tools, exposing sensitive credentials. Impact metr...

NVIDIA Triton Inference Server 安全漏洞

NVIDIA Triton Inference Server is an open source software from NVIDIA that helps standardize model deployment and deliver fast and scalable AI in production. A security vulnerability exists in NVIDIA Triton Inference Server that originates from injecting forged logs and executable commands by...

Motorola Solutions Vigilant Fixed LPR Coms Box Security Vulnerability

Motorola Solutions Vigilant Fixed LPR Coms Box is a license plate recognition system from Motorola Solutions USA. A security vulnerability exists in Motorola Solutions Vigilant Fixed LPR Coms Box version 3.1.171.9 and earlier, which stems from insufficient protection of logs for storing...

CVE-2024-5908

A problem with the Palo Alto Networks GlobalProtect app can result in exposure of encrypted user credentials, used for connecting to GlobalProtect, in application logs. Normally, these application logs are only viewable by local users and are included when generating logs for troubleshooting...

CVE-2024-5908

A problem with the Palo Alto Networks GlobalProtect app can result in exposure of encrypted user credentials, used for connecting to GlobalProtect, in application logs. Normally, these application logs are only viewable by local users and are included when generating logs for troubleshooting...