3937 matches found
CVE-2025-0418 Valmet DNA user passwords in plain text
Valmet DNA user passwords in plain text. This practice poses a security risk as attackers who gain access to local project data can read the passwords...
CVE-2025-0418
Valmet DNA CVE-2025-0418 involves storing user passwords in plain text, as described across multiple sources. The vulnerability affects Valmet DNA where local project data can expose passwords if accessed, implying insufficient protection of credentials in storage. The primary concrete detail ava...
PT-2025-14024 · Valmet · Valmet Dna
Name of the Vulnerable Software and Affected Versions: Valmet DNA affected versions not specified Description: The issue involves storing Valmet DNA user passwords in plain text, which poses a security risk. If attackers gain access to local project data, they can read the passwords...
CVE-2025-2877
Summary: CVE-2025-2877 concerns Red Hat Ansible Automation Platform’s Event-Driven Ansible where, in configurations with verbosity set to debug, inventory passwords are exposed in plain text during rulebook activations and related Event Streams. Affected scope (from connected docs): Red Hat Ansib...
CVE-2025-2877 Event-driven-ansible: exposure inventory passwords in plain text when starting a rulebook activation with verbosity set to debug in eda
A flaw was found in the Ansible Automation Platform's Event-Driven Ansible. In configurations where verbosity is set to "debug", inventory passwords are exposed in plain text when starting a rulebook activation. This issue exists for any "debug" action in a rulebook and also affects Event Streams...
CVE-2025-2877: Debug Messages Revealing Unnecessary Information
A flaw was found in the Ansible Automation Platform's Event-Driven Ansible. In configurations where verbosity is set to "debug", inventory passwords are exposed in plain text when starting a rulebook activation. This issue exists for any "debug" action in a rulebook and also affects Event Streams...
Security Bulletin: IBM Security Directory Suite is vulnerable to multiple issues
Summary Multiple Security Vulnerabilities in the IBM Security Directory Suite have been addressed by code updates and updating the relevant components. Vulnerability Details CVEID:CVE-2022-22475 DESCRIPTION: IBM WebSphere Application Server Liberty and Open Liberty 17.0.0.3 through 22.0.0.5 are...
Security Bulletin: Multiple Vulnerabilities in IBM Security Guardium Key Lifecycle Manager
Summary There are multiple vulnerabilities identified in IBM Security Guardium Key Lifecycle Manager. These vulnerabilties have been fixed in IBM Security Guardium Key Lifecycle Manager v4.2 . Please upgrade to GKLM v4.2 for the fixes. Vulnerability Details CVEID:CVE-2023-25689 DESCRIPTION: IBM...
Security Bulletin: IBM Security Verify Governance stores user credentials in plain clear text which can be read by a local user (CVE-2022-22470)
Summary IBM Security Verify Governance is vulnerable to exposure of user credentials to local users due to storage of credentials in cleartext CVE-2022-22470. This vulnerability has been removed by a code fix. Vulnerability Details CVEID:CVE-2022-22470 DESCRIPTION: IBM Security Verify Governance...
Security Bulletin: Security vulnerabilities have been fixed in IBM Security Verify Governance, Identity Manager virtual appliance component
Summary IBM Security Verify Governance, Identity Manager virtual appliance component has addressed the following vulnerabilities Vulnerability Details CVEID:CVE-2022-22457 DESCRIPTION: IBM Security Verify Governance stores sensitive information including user credentials in plain clear text which...
Security Bulletin: IBM Maximo Mobile is vulnerable to Information Disclosure (CVE-2022-41732)
Summary IBM Maximo Mobile stores user credentials in plain clear text which can be read by a local user. Vulnerability Details CVEID:CVE-2022-41732 DESCRIPTION: IBM Maximo Mobile stores user credentials in plain clear text which can be read by a local user. CVSS Base score: 6.2 CVSS Temporal Scor...
CVE-2024-45638
IBM Security QRadar 3.12 EDR stores user credentials in plain text which can be read by a local privileged user...
CVE-2024-45638
IBM Security QRadar 3.12 EDR stores user credentials in plain text which can be read by a local privileged user...
CVE-2024-45638 IBM QRadar EDR information disclosure
IBM Security QRadar 3.12 EDR stores user credentials in plain text which can be read by a local privileged user...
CVE-2024-45638 IBM QRadar EDR information disclosure
IBM Security QRadar 3.12 EDR stores user credentials in plain text which can be read by a local privileged user...
CVE-2024-45638
CVE-2024-45638 impacts IBM Security QRadar EDR 3.12. The root cause is plaintext storage of user credentials, enabling read access by a local privileged user and leading to information disclosure of sensitive data. Reported by IBM QRadar notes, the impact is limited to confidentiality (C:H) with ...
Linux Distros Unpatched Vulnerability : CVE-2024-36464
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When exporting media types, the password is exported in the YAML in plain text. This appears to be a best practices type issue and may have no actual impact. Th...
Linux Distros Unpatched Vulnerability : CVE-2018-10846
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A cache-based side channel in GnuTLS implementation that leads to plain text recovery in cross-VM attack setting was found. An attacker could use a combination ...
Cleartext Transmission of Sensitive Information
Overview skypilot is a SkyPilot: Run AI on Any Infra — Unified, Faster, Cheaper. Affected versions of this package are vulnerable to Cleartext Transmission of Sensitive Information by transmitting traffic over plain HTTP sensitive API requests are exposed to interception and man-in-the-middle...
