PT-2023-5223 · Ibm · Ibm Security Verify Information Queue

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Information Queue versions 10.0.4 through 10.0.5 Description: The issue is related to the storage of sensitive information in plain clear text, which can be accessed by a local user. This is due to a lack of encryption...

PT-2023-15931 · Dataprobe · Dataprobe Cloud

Name of the Vulnerable Software and Affected Versions: Dataprobe cloud affected versions not specified Description: The Dataprobe cloud stores usernames and passwords in plain text in a specific file. Any user able to read this file from the device could compromise other devices connected to the...

CVE-2022-47512

CVE-2022-47512 affects SolarWinds Hybrid Cloud Observability / SolarWinds Platform 2022.4 (prior to 2022.4.1). The issue is that sensitive information was stored in plain text in a file accessible to a local-accoung user, leading to potential confidentiality impact (CVE-2022-47512). The CVSS cont...

Authentication flaw

Sensitive information was stored in plain text in a file that is accessible by a user with a local account in Hybrid Cloud Observability HCO/ SolarWinds Platform 2022.4. No other versions are affected...

PT-2022-6298 · Apeks-Vuz · Apeks-Vuz

Name of the Vulnerable Software and Affected Versions: Apeks-VUZ system affected versions not specified Description: The issue is related to the storage of passwords in plain text in the system settings table of the Apeks database in the Apeks-VUZ education automation system. This could allow a...

CVE-2022-41732

IBM Maximo Mobile 8.7 and 8.8 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 237407...

Code injection

IBM Maximo Mobile 8.7 and 8.8 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 237407...

CVE-2022-41933

CVE-2022-41933 describes plaintext storage of user passwords via XWiki’s “Reset forgotten password” path. Affected: XWiki Platform (noted for 13.1RC1 and newer; only the reset-password flow stores passwords in clear text, not general password change). Impact: potential exposure of passwords in th...

PT-2022-26164 · Xwiki · Xwiki Platform

Name of the Vulnerable Software and Affected Versions: XWiki Platform versions 13.1RC1 through 14.6RC1 XWiki Platform versions 13.1RC1 through 14.4.3 XWiki Platform versions 13.1RC1 through 13.10.8 Description: The XWiki Platform has a vulnerability where the password is stored in plain text in t...

CVE-2022-27549

CVE-2022-27549 affects HCL Launch. The vulnerability is an information-disclosure issue where data for recurring activities may be stored in plain text, exposing sensitive information and impacting confidentiality. Reported in multiple sources (NVD entry and CNVD/CNNVD references), with CVSS metr...

CVE-2022-27549

HCL Launch may store certain data for recurring activities in a plain text format...

Code injection

IBM UrbanCode Deploy UCD 6.2.7.15, 7.0.5.10, 7.1.2.6, and 7.2.2.1 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 22106...

GHSA-GVMR-MP5Q-9WVW Plaintext Storage of a Password in Jenkins Skype notifier Plugin

Skype notifier Plugin 1.1.0 and earlier stores a password unencrypted in its global configuration file hudson.plugins.skype.im.transport.SkypePublisher.xml on the Jenkins controller as part of its configuration. This password can be viewed by users with access to the Jenkins controller file syste...

CVE-2022-22478

IBM Spectrum Protect Client 8.1.0.0 through 8.1.14.0 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 225886...

Code injection

IBM Spectrum Protect Client 8.1.0.0 through 8.1.14.0 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 225886...

Passwords stored in plain text by Jenkins Artifactory Plugin

Artifactory Plugin 3.5.0 and earlier stores its Artifactory server password in plain text in the global configuration file org.jfrog.hudson.ArtifactoryBuilder.xml. This password can be viewed by users with access to the Jenkins controller file system. Artifactory Plugin 3.6.0 now stores the...

GHSA-6793-GMP9-2535 Password stored in plain text by ECX Copy Data Management Plugin

Jenkins ECX Copy Data Management Plugin 1.9 and earlier stores a password unencrypted in job config.xml files on the Jenkins master where it can be viewed by users with Extended Read permission, or access to the master file system...

GHSA-GMG2-3W6V-945P Password stored in plain text by Parasoft Environment Manager Plugin

Jenkins Parasoft Environment Manager Plugin 2.14 and earlier stores a password unencrypted in job config.xml files on the Jenkins master where it can be viewed by users with Extended Read permission, or access to the master file system...

Recorded Future: Storage of old passwords in plain text format

Summary: Server response from app.recordedfuture.com has old passwords for a logged in account in plain text format. Storage of passwords in any readable format or using weak hashes put the account or system at great risk. What's interesting is how RecordedFuture store multiple passwords not just...

CVE-2021-39046

CVE-2021-39046 affects IBM Business Automation Workflow (versions 18.0–21.0) and IBM Business Process Manager (8.5–8.6). The root cause is information disclosure via plaintext storage of user credentials readable by a privileged user. IBM’s advisories and product bulletin confirm this vulnerabili...