The vulnerability of the OAuth implementation of the Expo framework is related to insufficient protection of registration data, allowing attackers to obtain user registration data.

The vulnerability of the OAuth implementation of the Expo framework is related to insufficient protection of registration data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain user registration data...

The vulnerability of the application development environment for ISaGRAF programmable logic controllers allows a hacker to disclose protected information.

The vulnerability of the application development environment for ISaGRAF programmable logic controllers is related to the rigid encoding of registration data. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose protected information...

The vulnerability of the programming software for PLCs (programmable logic controllers), namely EcoStruxure Control Expert, and the automation system for technological processes, EcoStruxure Process Expert, allows a intruder to gain unauthorized access to SMTP account data.

The vulnerability of the programming software for PLCs programmable logic controllers, as well as the EcoStruxure Process Expert automation system, is related to insufficient protection for registration data. Exploiting this vulnerability could allow attackers to gain unauthorized access to SMTP...

The vulnerability of Fortinet’s FortiNAC and FortiNAC-F access control devices stems from insufficient protection of registration data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the access control devices in Fortinet’s FortiNAC and FortiNAC-F systems stems from insufficient protection of registration data during the processing of the /etc/shadow file. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...

The vulnerability of TP-Link T2600G-28SQ switch’s microprogramming software, related to errors in managing registration data, allows a intruder to gain unauthorized access to protected information.

The vulnerability of TP-Link T2600G-28SQ switch’s microprogramming software is related to errors in managing registration data when processing SSH keys. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

PT-2023-2946 · Unknown · Expo Framework

Name of the Vulnerable Software and Affected Versions: Expo framework affected versions not specified Description: The issue is related to the implementation of the OAuth standard in the Expo framework, specifically with insufficient protection of registration data. An attacker can exploit this t...

The vulnerability of the Fortinet FortiNAC network access control mechanism lies in the insufficient protection of registration data, allowing attackers to retrieve user password information.

The vulnerability of the Fortinet FortiNAC network access control device is related to insufficient protection for registration data. Exploiting this vulnerability could allow an attacker to retrieve user password information by unauthorized access to the database...

The vulnerability of the VMware HPE OneView for VMware vCenter management tool, related to insufficient protection of registration data, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the VMware HPE OneView for VMware vCenter management tool is related to insufficient protection for registration data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the NGINX Agent and the NGINX Instance Manager automation platform, related to insufficient protection of registration data, allows a perpetrator to gain access to secret keys.

The vulnerability of the NGINX Agent and the NGINX Instance Manager automation platform is related to insufficient protection of registration data. Exploiting this vulnerability can allow attackers to gain access to secret keys...

PT-2023-2180 · Nginx · Nginx Agent

Name of the Vulnerable Software and Affected Versions: NGINX Agent versions 2.0 through 2.23.2 Description: The issue is related to insufficient protection of registration data, which may allow an attacker to gain access to private keys. This can occur when an authenticated attacker with local...

The vulnerabilities of the programming software for PLCs (programmable logic controllers), the configuration software SCADAPack RemoteConnect, and the automation system for technological processes EcoStruxure Process Expert allow a intruder to gain unauthorized access to project files.

The vulnerabilities of the programming software for PLCs programmable logic controllers, the configuration software SCADAPack RemoteConnect, and the automation system for technological processes EcoStruxure Process Expert are related to insufficient protection of registration data. Exploiting the...

The vulnerability of the IBM Cloud Pak for Security (CP4S) platform, related to insufficient protection of registration data, allows attackers to access confidential information.

The vulnerability of the IBM Cloud Pak for Security CP4S platform is related to insufficient protection of registration data. Exploiting this vulnerability could allow a malicious actor to gain access to confidential information...

The vulnerability of the management interface for Fortinet FortiPortal analytics and security management tools allows a attacker to gain access to information about user account passwords.

The vulnerability of the management interface for Fortinet’s FortiPortal security analysis and management tool is related to insufficient protection of registration data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to account password information...

PT-2023-2205 · Hewlett Packard · Hpe Oneview For Vmware Vcenter

Name of the Vulnerable Software and Affected Versions: HPE OneView for VMware vCenter affected versions not specified Description: The issue is related to insufficient protection of registration data, which may lead to the disclosure of the HPE OneView username and password. This could allow an...

PT-2023-2200 · Fortinet · Fortinac

Name of the Vulnerable Software and Affected Versions: Fortinet FortiNAC versions 8.3.7, 8.5.0 through 8.5.4, 8.6.0 through 8.6.5, 8.7.0 through 8.7.6, 8.8.0 through 8.8.11, 9.1.0 through 9.1.7, 9.2.0 through 9.2.5, 9.4.0 Description: The issue is related to insufficient protection of registratio...

The vulnerability of the IBM Robotic Process Automation software lies in its insufficient protection of registration data, allowing attackers to disclose protected information.

The vulnerability of the IBM Robotic Process Automation software lies in the insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

The vulnerability of Intel Active Management Technology and Standard Manageability implementations lies in the insufficient protection of registration data, which allows attackers to enhance their privileges and disclose sensitive information.

The vulnerability of Intel Active Management Technology and Standard Manageability implementations is related to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and disclose sensitive information...

The vulnerability of microprogrammed software in programmable logic controllers SIMATIC S7-1200 and S7-1500 is related to insufficient protection of registration data, allowing attackers to gain full access to the device.

The vulnerability of microprogrammed software in programmable logic controllers SIMATIC S7-1200 and S7-1500 is related to insufficient protection of registration data. Exploiting this vulnerability can allow an intruder to gain full access to the device...

The vulnerability of the systemd.txt file on the NGINX Controller platform allows a hacker to disclose protected information.

The vulnerability of the systemd.txt file on the NGINX Controller application monitoring and management platform is related to insufficient protection for registration data. Exploiting this vulnerability could allow attackers to disclose sensitive information that is protected by this system...

The vulnerability of the Download Monitor plugin of the WordPress content management system allows a hacker to disclose protected information.

The vulnerability of the Download Monitor plugin in the WordPress content management system is related to insufficient protection of registration data. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...