CVE-2025-12679: Cleartext Storage of Sensitive Information

A vulnerability in Brocade SANnav before 2.4.0b prints the Password-Based Encryption PBE key in plaintext in the system audit log file. The vulnerability could allow a remote authenticated attacker with access to the audit logs to access the pbe key. Note: The vulnerability is only triggered duri...

nss:cryptofuzz: Crash in nsc_pbe_key_gen

Project: https://hg.mozilla.org/projects/nss Detailed Report: https://oss-fuzz.com/testcase?key=6379366222462976 Project: nss Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz Job Type: libfuzzerasannss Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000000021a7 Crash State:...

Weak Implementation Of Password Cipher

nexus-ldap-common contains a weak implementation of password cipher. It stores the LDAP bind password using the PBE Key Spec with only 23 iterations and a hard-coded password. This allows the cipher to be easily defeated...