CVE-2023-0690 Boundary Workers Store Rotated Credentials in Plaintext Even When a Key Management Service Configured

HashiCorp Boundary from 0.10.0 through 0.11.2 contain an issue where when using a PKI-based worker with a Key Management Service KMS defined in the configuration file, new credentials created after an automatic rotation may not have been encrypted via the intended KMS. This would result in the...

PT-2023-16458 · Hashicorp · Hashicorp Boundary

Name of the Vulnerable Software and Affected Versions: HashiCorp Boundary versions 0.10.0 through 0.11.2 Description: The issue arises when using a PKI-based worker with a Key Management Service KMS defined in the configuration file. After an automatic rotation, new credentials may not be encrypt...

Xerox WorkCentre 3550 安全漏洞

Xerox WorkCentre is a series of all-in-one printers from Xerox Corporation USA. A security vulnerability exists in the Xerox WorkCentre 3550 version 25.003.03.000, which originates from the fact that an authenticated attacker can view SMB server settings and can obtain plaintext credentials relat...

Johnson Controls Metasys ADS/ADX/OAS 安全漏洞

Johnson Controls Metasys ADS/ADX/OAS Servers is an application and data server from Johnson Controls, Inc. A security vulnerability exists in Johnson Controls Metasys ADS/ADX/OAS version 10 up to and including 10.1.6, and version 11 up to and including 11.0.3, which stems from insufficient...

IBM Security Verify Governance 安全漏洞

IBM Security Verify Governance is an intelligent identity access platform from International Business Machines IBM, Inc. provides organizations with a platform to analyze, define and control user access and access risk. A security vulnerability exists in IBM Security Verify Governance version 10....

PT-2023-12700 · Ibm · Ibm Security Verify Governance

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Governance version 10.0 Description: The issue allows a local user to read user credentials stored in plain clear text. Recommendations: For IBM Security Verify Governance version 10.0, consider restricting access to...

IBM Security Verify Governance 安全漏洞

IBM Security Verify Governance Identity Manager is an IBM network appliance-based integration that focuses on business-centric rules, activities, and processes.IBM Security Verify Governance Identity Manager version 10.0.1 is vulnerable to An information disclosure vulnerability exists in IBM...

CVE-2022-31697

The vCenter Server contains an information disclosure vulnerability due to the logging of credentials in plaintext. A malicious actor with access to a workstation that invoked a vCenter Server Appliance ISO operation Install/Upgrade/Migrate/Restore can access plaintext passwords used during that...

VMware ESXi和vCenter Server 信息泄露漏洞

VMware ESXi and VMware vCenter Server are both products of VMware, Inc. VMware ESXi is a server virtualization platform that can be installed directly on physical servers. vMware vCenter Server is a suite of server and virtualization management software. The software provides a centralized platfo...

IBM Maximo Mobile 安全漏洞

IBM Maximo Mobile is a generation of mobile application platform from International Business Machines IBM. A security vulnerability exists in IBM Maximo Mobile versions 8.7 and 8.8 that stems from storing user credentials in plaintext...

Hitachi Energy PCM600 安全漏洞

The Hitachi Energy PCM600 is a simplified management tool for protection and control relays from Hitachi, Japan. An information disclosure vulnerability exists in Hitachi Energy PCM600. The vulnerability stems from where IED credentials are stored in the PCM600 database in plaintext format. An...

PassWork 安全漏洞

PassWork is a password manager from PassWork. A security vulnerability exists in PassWork version 5.0.9. An attacker exploited the vulnerability to obtain plaintext cached credentials...

IBM Cognos Analytics 安全漏洞

IBM Cognos Analytics is a suite of business intelligence software from IBM Corporation. The software includes reports, dashboards, and scorecards, and can help companies make adjustments to their decisions by analyzing key factors and key people, etc. An information disclosure vulnerability exist...

IBM Security Guardium 安全漏洞

IBM Security Guardium is a suite of platforms from International Business Machines IBM that provide data protection capabilities. The platform includes features such as customized UI, report management and streamlined audit process building. A security vulnerability exists in IBM Security Guardiu...

CVE-2021-39009

Summary: CVE-2021-39009 affects IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1, where user credentials are stored in plain text and readable by a local privileged user. The IBM bulletin confirms remediation: upgrade to IBM Cognos Analytics 11.2.3 or apply FP5 for 11.1.x to address this issue. Th...

PT-2022-10838 · Ibm · Ibm Cognos Analytics

Name of the Vulnerable Software and Affected Versions: IBM Cognos Analytics versions 11.1.7 through 11.2.1 Description: The issue allows a local privileged user to read user credentials stored in plain clear text. Recommendations: For versions 11.1.7 through 11.2.1, consider restricting access to...

IBM Cognos Analytics 安全漏洞

IBM Cognos Analytics is a suite of business intelligence software from IBM in the United States. The software includes reports, dashboards, and scorecards, and can assist organizations in adjusting their decision-making by analyzing content such as key factors and key people. A security...

CVE-2021-36783

A Insufficiently Protected Credentials vulnerability in SUSE Rancher allows authenticated Cluster Owners, Cluster Members, Project Owners and Project Members to read credentials, passwords and API tokens that have been stored in cleartext and exposed via API endpoints. This issue affects: SUSE...

CVE-2022-36308

Airspan AirVelocity 1500 web management UI displays SNMP credentials in plaintext on software versions older than 15.18.00.2511, and stores SNMPv3 credentials unhashed on the filesystem, enabling anyone with web access to use these credentials to manipulate the eNodeB over SNMP. This issue may...

CVE-2022-36308

The CVE-2022-36308 entry affects Airspan AirVelocity 1500 (web management UI). The root cause is that SNMP credentials are exposed: plaintext in the management UI for versions earlier than 15.18.00.2511 and SNMPv3 credentials stored unhashed on the filesystem, enabling anyone with web access to u...