Format string

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. The password used for authentication for the LOGO! Website and the LOGO! Access Tool is sent in a recoverable format. An attacker with access to the network traffic could derive valid logins...

CVE-2020-25235

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. The password used for authentication for the LOGO! Website and the LOGO! Access Tool is sent in a recoverable format. An attacker with access to the network traffic could derive valid logins...

PT-2021-12725

Name of the Vulnerable Software and Affected Versions: Nextcloud Server versions prior to 20.0.0 Description: The issue concerns the storage of passwords in a recoverable format, even when external storage is not configured. This affects Nextcloud Server versions prior to 20.0.0. Recommendations:...

External storage app saves password for all users in the database (NC-SA-2021-006)

A missing condition in Nextcloud Server 19 and prior caused the external storage app to always store the users password in a recoverable format...

CVE-2020-24620

Unisys Stealthcore before 4.0.134 stores passwords in a recoverable format. Therefore, a search of Enterprise Manager can potentially reveal credentials...

Format string

Unisys Stealthcore before 4.0.134 stores passwords in a recoverable format. Therefore, a search of Enterprise Manager can potentially reveal credentials...

CVE-2020-24620

Unisys Stealthcore before 4.0.134 stores passwords in a recoverable format. Therefore, a search of Enterprise Manager can potentially reveal credentials...

CVE-2020-24620

Unisys Stealth(core) before version 4.0.134 stores passwords in a recoverable format, enabling credential exposure via an Enterprise Manager search. Affected component: Unisys Stealth(core); Root cause: insecure, recoverable password storage. Impact stated: credentials may be revealed. Public det...

CVE-2020-9403

In PACTware before 4.1 SP6 and 5.x before 5.0.5.31, passwords are stored in a recoverable format, and may be retrieved by any user with access to the PACTware workstation...

CVE-2020-9403

In PACTware before 4.1 SP6 and 5.x before 5.0.5.31, passwords are stored in a recoverable format, and may be retrieved by any user with access to the PACTware workstation...

PT-2020-20635

Name of the Vulnerable Software and Affected Versions PACTware versions prior to 4.1 SP6 PACTware versions 5.x prior to 5.0.5.31 Description The issue allows passwords to be stored in a recoverable format. As a result, any user with access to the PACTware workstation may retrieve these passwords...

CVE-2019-18256

BIOTRONIK CardioMessenger II, The affected products use individual per-device credentials that are stored in a recoverable format. An attacker with physical access to the CardioMessenger can use these credentials for network authentication and decryption of local data in transit...

CVE-2019-18256

BIOTRONIK CardioMessenger II, The affected products use individual per-device credentials that are stored in a recoverable format. An attacker with physical access to the CardioMessenger can use these credentials for network authentication and decryption of local data in transit...

PT-2020-9953

Name of the Vulnerable Software and Affected Versions: BIOTRONIK CardioMessenger II affected versions not specified Description: The issue concerns the storage of individual per-device credentials in a recoverable format. An attacker with physical access to the CardioMessenger can exploit these...

CVE-2013-4423

CloudForms stores user passwords in recoverable format...

Format string

CloudForms stores user passwords in recoverable format...

CVE-2013-4423

CloudForms (Red Hat CloudForms) is affected by CVE-2013-4423, where user passwords are stored in a recoverable format, enabling potential disclosure of cleartext passwords. The vulnerability concerns the storage mechanism rather than a specific exploit, and public details describe an information ...

PT-2019-6951 · Red Hat · Cloudforms

Name of the Vulnerable Software and Affected Versions: CloudForms affected versions not specified Description: The issue concerns the storage of user passwords in a recoverable format, which poses a security risk. Recommendations: At the moment, there is no information about a newer version that...

CVE-2019-1010241

Jenkins Credentials Binding Plugin Jenkins 1.17 is affected by: CWE-257: Storing Passwords in a Recoverable Format. The impact is: Authenticated users can recover credentials. The component is: config-variables.jelly line 30 passwordVariable. The attack vector is: Attacker creates and executes a...

CVE-2019-1010241

Jenkins Credentials Binding Plugin Jenkins 1.17 is affected by: CWE-257: Storing Passwords in a Recoverable Format. The impact is: Authenticated users can recover credentials. The component is: config-variables.jelly line 30 passwordVariable. The attack vector is: Attacker creates and executes a...