CVE-2023-40682 IBM App Connect Enterprise information disclosure

IBM App Connect Enterprise 12.0.1.0 through 12.0.8.0 contains an unspecified vulnerability that could allow a local privileged user to obtain sensitive information from API logs. IBM X-Force ID: 263833...

CVE-2023-40682

CVE-2023-40682 affects IBM App Connect Enterprise versions 12.0.1.0 through 12.0.8.0 and describes an unspecified vulnerability enabling a local privileged user to obtain sensitive information from API logs. Multiple connected sources corroborate the affected product and the information-disclosur...

PT-2023-27598 · Ibm · Ibm App Connect Enterprise

Name of the Vulnerable Software and Affected Versions: IBM App Connect Enterprise versions 12.0.1.0 through 12.0.8.0 Description: The issue allows a local privileged user to obtain sensitive information from API logs. Recommendations: For IBM App Connect Enterprise versions 12.0.1.0 through...

IBM App Connect Enterprise 日志信息泄露漏洞

IBM App Connect Enterprise is an operating system from International Business Machines IBM, Inc. that combines existing industry-trusted IBM Integration Bus technology with IBM App Connect Professional and new cloud native IBM App Connect Enterprise combines existing industry-trusted IBM...

CVE-2023-41263

An issue was discovered in Plixer Scrutinizer before 19.3.1. It exposes debug logs to unauthenticated users at the /debug/ URL path. With knowledge of valid IP addresses and source types, an unauthenticated attacker can download debug logs containing application-related information...

CVE-2023-41263

An issue was discovered in Plixer Scrutinizer before 19.3.1. It exposes debug logs to unauthenticated users at the /debug/ URL path. With knowledge of valid IP addresses and source types, an unauthenticated attacker can download debug logs containing application-related information...

CVE-2023-41263

An issue was discovered in Plixer Scrutinizer before 19.3.1. It exposes debug logs to unauthenticated users at the /debug/ URL path. With knowledge of valid IP addresses and source types, an unauthenticated attacker can download debug logs containing application-related information...

Information disclosure

An issue was discovered in Plixer Scrutinizer before 19.3.1. It exposes debug logs to unauthenticated users at the /debug/ URL path. With knowledge of valid IP addresses and source types, an unauthenticated attacker can download debug logs containing application-related information...

Security Bulletin: IBM App Connect Enterprise is vulnerable to a potential information disclosure

Summary IBM App Connect Enterprise contains an unspecified vulnerability that could allow a local privileged user to obtain sensitive information from API logs CVE-2023-40682. Vulnerability Details CVEID:CVE-2023-40682 DESCRIPTION: IBM App Connect Enterprise contains an unspecified vulnerability...

Using Velociraptor for large-scale endpoint visibility and rapid threat hunting

TL;DR Network-wide collection, acquisition and monitoring tool for use in DFIR engagements Designed for enterprise networks 150k+ Deployments aren’t unheard of Boasts many features that your commercial EDR has, and a few more Flexible querying language that can adapt to new threats and encourages...

CVE-2023-41263

An issue was discovered in Plixer Scrutinizer before 19.3.1. It exposes debug logs to unauthenticated users at the /debug/ URL path. With knowledge of valid IP addresses and source types, an unauthenticated attacker can download debug logs containing application-related information...

CVE-2023-41263

An issue was discovered in Plixer Scrutinizer before 19.3.1. It exposes debug logs to unauthenticated users at the /debug/ URL path. With knowledge of valid IP addresses and source types, an unauthenticated attacker can download debug logs containing application-related information...

CVE-2023-41263

CVE-2023-41263 concerns Plixer Scrutinizer prior to 19.3.1, where debug logs are exposed to unauthenticated users via the /debug/ URL path. The impact is information disclosure: an attacker with knowledge of valid IPs and source types could download application-related logs containing internal in...

CVE-2023-37536

creationtimestamp| type| source ---|---|--- 2023-10-11 12:17:18+00:00| seen| https://t.me/cibsecurity/72064 2024-02-07 08:41:44+00:00| seen| https://t.me/ctinow/180569 2024-02-07 08:41:45+00:00| seen| https://t.me/ctinow/180570 2024-02-07 08:41:46+00:00| seen| https://t.me/ctinow/180571 2024-02-0...

CVE-2023-25604

An insertion of sensitive information into log file vulnerability in Fortinet FortiGuest 1.0.0 allows a local attacker to access plaintext passwords in the RADIUS logs...

Design/Logic Flaw

An insertion of sensitive information into log file vulnerability in Fortinet FortiGuest 1.0.0 allows a local attacker to access plaintext passwords in the RADIUS logs...

CVE-2023-25604

An insertion of sensitive information into log file vulnerability in Fortinet FortiGuest 1.0.0 allows a local attacker to access plaintext passwords in the RADIUS logs...

CVE-2023-5499

Information exposure vulnerability in Shenzhen Reachfar v28, the exploitation of which could allow a remote attacker to retrieve all the week's logs stored in the 'log2' directory. An attacker could retrieve sensitive information such as remembered wifi networks, sent messages, SOS device locatio...

Fleet Server v8.10.3 Security Update

Fleet Server Insertion of Sensitive Information into Log File ESA-2023-20 An issue was discovered in Fleet Server = v8.10.0 and = v8.10.0 and v8.10.3 Solutions and Mitigations: If an affected version is being utilized then upgrade to Fleet Server v8.10.3 or above. If there are ephemeral container...

PT-2023-6022 · Fortinet · Fortiguest

Name of the Vulnerable Software and Affected Versions: Fortinet FortiGuest version 1.0.0 Description: The issue is related to an insertion of sensitive information into log files, which allows a local attacker to access plaintext passwords in the RADIUS logs. This is due to insufficient protectio...