39 matches found
CVE-2022-22251
On cSRX Series devices software permission issues in the container filesystem and stored files combined with storing passwords in a recoverable format in Juniper Networks Junos OS allows a local, low-privileged attacker to elevate their permissions to take control of any instance of a cSRX softwa...
PT-2022-22386 · Abb · Abb Zenon
Name of the Vulnerable Software and Affected Versions: ABB Zenon version 8.20 Description: The issue allows an attacker to store passwords in a recoverable format, potentially enabling them to add more network clients. These clients may then monitor various activities of the Zenon system...
CVE-2022-34837
Storing Passwords in a Recoverable Format vulnerability in ABB Zenon 8.20 allows an attacker who successfully exploit the vulnerability may add more network clients that may monitor various activities of the Zenon...
PT-2022-3482 · Unknown · Data Center Expert
Name of the Vulnerable Software and Affected Versions: Data Center Expert versions prior to V7.9.0 Description: A vulnerability exists where passwords are stored in a recoverable format, potentially allowing unwanted access to a Data Center Expert instance over a network by a malicious third-part...
Storing Passwords in a Recoverable Format
Overview org.jenkins-ci.plugins:credentials-binding is a plugin that allows credentials to be bound to environment variables for use from miscellaneous build steps. Affected versions of this package are vulnerable to Storing Passwords in a Recoverable Format via the config-variables.jelly file,...
PT-2022-19974 · Mobotix · Mobotix Control Center
Name of the Vulnerable Software and Affected Versions: Mobotix Control Center MxCC versions 2.5.4.5 and earlier Description: The issue concerns insufficiently protected credentials, where passwords are stored in a recoverable format via the MxCC.ini config file. This enables an attacker to gain...
GHSA-Q9QR-H33G-FW3J TeamPass Storing Passwords in a Recoverable Format vulnerability
TeamPass version 2.1.27 and earlier contains a Storing Passwords in a Recoverable Format vulnerability in Shared password vaults that can result in all shared passwords are recoverable server side. This attack appears to be exploitable via any vulnerability that can bypass authentication or role...
Strapi 安全漏洞
Strapi is an open source headless content management system CMS. A security vulnerability exists in Strapi that stems from the storage of passwords in a recoverable format in the DOCUMENTATION plug-in component. An attacker could use this vulnerability to access a victim's HTTP request, obtain th...
unisys stealth(core) 安全漏洞
The unisys stealthcore is a firewall from Unisys. The firewall is easy to configure and expand, and can be upgraded with micro-segmentation to fully secure internal data. A security vulnerability exists in Unisys Stealth core that originates from storing passwords in a recoverable format. The...
CVE-2020-8296
Nextcloud Server prior to 20.0.0 stores passwords in a recoverable format even when external storage is not configured...
CVE-2020-24620
Unisys Stealthcore before 4.0.134 stores passwords in a recoverable format. Therefore, a search of Enterprise Manager can potentially reveal credentials...
CVE-2020-9403
In PACTware before 4.1 SP6 and 5.x before 5.0.5.31, passwords are stored in a recoverable format, and may be retrieved by any user with access to the PACTware workstation...
CloudBees Jenkins Credentials Binding Plugin Jenkins Plugin Information Disclosure Vulnerability
CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Jenkins Credentials Binding Plugin is used in...
CVE-2019-6567
A vulnerability has been identified in SCALANCE X-200 switch family incl. SIPLUS NET variants All Versions V5.2.4, SCALANCE X-200IRT switch family incl. SIPLUS NET variants All versions V5.5.0, SCALANCE X-300 switch family incl. X408 and SIPLUS NET variants All versions V4.1.3, SCALANCE X-414-3E...
SAFE'N'SEC SoftControl/SafenSoft SysWatch, SoftControl/SafenSoft TPSecure, and SoftControl/SafenSoft Enterprise Suite Security Vulnerability
SAFE'N'SEC SoftControl/SafenSoft SysWatch, SoftControl/SafenSoft TPSecure, and SoftControl/SafenSoft Enterprise Suite are Russian SAFE'N'SEC's proactive defense-capable malware applications. SAFE'N'SEC SoftControl/SafenSoft SysWatch, SoftControl/SafenSoft TPSecure, and SoftControl/SafenSoft...
CVE-2016-8566
An issue was discovered in Siemens SICAM PAS before 8.00. Because of Storing Passwords in a Recoverable Format, an authenticated local attacker with certain privileges could possibly reconstruct the passwords of users for accessing the database...
The vulnerability of the control device in the electrical energy sector, SICAM PAS, allows a intruder to access the database.
The vulnerability of the telecontrol device in the electric energy sector, SICAM PAS, is related to the storage of passwords in a recoverable format. Exploiting this vulnerability allows a malicious actor, who operates locally and has completed the authentication process, to restore user password...
PT-2016-2998 · Siemens · Sicam Pas
Name of the Vulnerable Software and Affected Versions: Siemens SICAM PAS versions prior to 8.00 Description: The issue is related to storing passwords in a recoverable format. An authenticated local attacker with certain privileges could possibly reconstruct the passwords of users for accessing t...
