The vulnerability of the VMware HPE OneView for VMware vCenter management tool, related to insufficient protection of registration data, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the VMware HPE OneView for VMware vCenter management tool is related to insufficient protection for registration data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the NGINX Agent and the NGINX Instance Manager automation platform, related to insufficient protection of registration data, allows a perpetrator to gain access to secret keys.

The vulnerability of the NGINX Agent and the NGINX Instance Manager automation platform is related to insufficient protection of registration data. Exploiting this vulnerability can allow attackers to gain access to secret keys...

PT-2023-2180 · Nginx · Nginx Agent

Name of the Vulnerable Software and Affected Versions: NGINX Agent versions 2.0 through 2.23.2 Description: The issue is related to insufficient protection of registration data, which may allow an attacker to gain access to private keys. This can occur when an authenticated attacker with local...

The vulnerabilities of the programming software for PLCs (programmable logic controllers), the configuration software SCADAPack RemoteConnect, and the automation system for technological processes EcoStruxure Process Expert allow a intruder to gain unauthorized access to project files.

The vulnerabilities of the programming software for PLCs programmable logic controllers, the configuration software SCADAPack RemoteConnect, and the automation system for technological processes EcoStruxure Process Expert are related to insufficient protection of registration data. Exploiting the...

The vulnerability of the IBM Cloud Pak for Security (CP4S) platform, related to insufficient protection of registration data, allows attackers to access confidential information.

The vulnerability of the IBM Cloud Pak for Security CP4S platform is related to insufficient protection of registration data. Exploiting this vulnerability could allow a malicious actor to gain access to confidential information...

The vulnerability of the management interface for Fortinet FortiPortal analytics and security management tools allows a attacker to gain access to information about user account passwords.

The vulnerability of the management interface for Fortinet’s FortiPortal security analysis and management tool is related to insufficient protection of registration data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to account password information...

PT-2023-2205 · Hewlett Packard · Hpe Oneview For Vmware Vcenter

Name of the Vulnerable Software and Affected Versions: HPE OneView for VMware vCenter affected versions not specified Description: The issue is related to insufficient protection of registration data, which may lead to the disclosure of the HPE OneView username and password. This could allow an...

PT-2023-2200 · Fortinet · Fortinac

Name of the Vulnerable Software and Affected Versions: Fortinet FortiNAC versions 8.3.7, 8.5.0 through 8.5.4, 8.6.0 through 8.6.5, 8.7.0 through 8.7.6, 8.8.0 through 8.8.11, 9.1.0 through 9.1.7, 9.2.0 through 9.2.5, 9.4.0 Description: The issue is related to insufficient protection of registratio...

The vulnerability of the IBM Robotic Process Automation software lies in its insufficient protection of registration data, allowing attackers to disclose protected information.

The vulnerability of the IBM Robotic Process Automation software lies in the insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

The vulnerability of Intel Active Management Technology and Standard Manageability implementations lies in the insufficient protection of registration data, which allows attackers to enhance their privileges and disclose sensitive information.

The vulnerability of Intel Active Management Technology and Standard Manageability implementations is related to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and disclose sensitive information...

The vulnerability of microprogrammed software in programmable logic controllers SIMATIC S7-1200 and S7-1500 is related to insufficient protection of registration data, allowing attackers to gain full access to the device.

The vulnerability of microprogrammed software in programmable logic controllers SIMATIC S7-1200 and S7-1500 is related to insufficient protection of registration data. Exploiting this vulnerability can allow an intruder to gain full access to the device...

The vulnerability of the Download Monitor plugin of the WordPress content management system allows a hacker to disclose protected information.

The vulnerability of the Download Monitor plugin in the WordPress content management system is related to insufficient protection of registration data. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

The vulnerability of the systemd.txt file on the NGINX Controller platform allows a hacker to disclose protected information.

The vulnerability of the systemd.txt file on the NGINX Controller application monitoring and management platform is related to insufficient protection for registration data. Exploiting this vulnerability could allow attackers to disclose sensitive information that is protected by this system...

The vulnerability of the Mozilla Firefox browser for iOS, related to insufficient protection of registration data, allows a hacker to gain access to user passwords for the current domain.

The vulnerability of the Mozilla Firefox browser for iOS is related to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor to gain access to user passwords for the current domain...

The vulnerability of the Command Line Interface (CLI) of the deployment and application management automation tool in Docker-enabled environments allows a attacker to obtain arbitrary credentials.

The vulnerability of the Command Line Interface CLI of the deployment and application management tool in Docker-enabled environments is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker, operating remotely, to obtain arbitrary user...

The vulnerability of corporate VPN applications for GlobalProtect Agent for Linux, related to insufficient protection of registration data, allows a hacker to disclose protected information.

The vulnerability of the corporate VPN application GlobalProtect Agent for Linux is related to insufficient protection of registration data. Exploiting this vulnerability can allow attackers to disclose sensitive information...

The vulnerability of VMware Workstation’s hypervisor is related to insufficient protection of registration data, allowing attackers to disclose protected information.

The vulnerability of VMware Workstation hypervisor is related to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

The vulnerability of the monitoring tool for VMware vRealize Operations, related to insufficient protection of registration data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the monitoring tool for VMware vRealize Operations is related to insufficient protection of registration data. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the PLC programming software EcoStruxure Control Expert, the automation system ProcessExpert, and the configuration software SCADAPack RemoteConnect lies in the insufficient protection of registration data, allowing unauthorized access by attackers to the device.

The vulnerabilities of the PLC programming software EcoStruxure Control Expert, the automation system ProcessExpert, and the configuration software SCADAPack RemoteConnect are related to insufficient protection for registration data. Exploiting these vulnerabilities can allow attackers to gain...

PT-2022-4229 · Vmware · Vmware Vrealize Operations

Name of the Vulnerable Software and Affected Versions: VMware vRealize Operations affected versions not specified Description: The issue is related to insufficient protection of registration data, which can lead to information disclosure. A low-privileged malicious actor with network access can...