CVE-2024-42021

An improper access control vulnerability allows an attacker with valid access tokens to access saved credentials...

CVE-2024-42021

An improper access control vulnerability allows an attacker with valid access tokens to access saved credentials...

CVE-2024-40710

A series of related high-severity vulnerabilities, the most notable enabling remote code execution RCE as the service account and extraction of sensitive information savedcredentials and passwords. Exploiting these vulnerabilities requires a user who has been assigned a low-privileged role within...

CVE-2024-42021

An improper access control vulnerability allows an attacker with valid access tokens to access saved credentials...

CVE-2024-42021

CVE-2024-42021 affects Veeam ONE (12.1.x) and earlier 12 builds, where an improper access control allows an attacker with valid access tokens to access saved credentials. The issue is documented in Veeam ONE vulnerability details and is noted as fixed in Veeam ONE 12.2 (build 12.2.0.4093). Affect...

CVE-2024-42021

An improper access control vulnerability allows an attacker with valid access tokens to access saved credentials...

Veeam ONE 安全漏洞

Veeam ONE is a suite of IT monitoring and reporting tools from Veeam USA. The product supports features such as backup monitoring, operational status monitoring of virtual and physical environments. A security vulnerability exists in Veeam ONE version 12.1.0.3208 and previous versions 12, which...

PT-2024-6314 · Veeam · Veeam One

Name of the Vulnerable Software and Affected Versions: Veeam ONE affected versions not specified Description: An improper access control issue allows an attacker with valid access tokens to access saved credentials. The vulnerability is related to deficiencies in access control in the Veeam ONE I...

UPM - Microsoft Edge browser does not retain saved credentials in subsequent logins

With Citrix User Profile Management UPM configuration Microsoft Edge browser does not retain saved credentials in subsequent login to VDI...

HCL Technologies HCL Launch 安全漏洞

HCL Technologies HCL Launch is a versatile, enterprise-grade continuous delivery automation software from HCL Technologies, Inc. for handling the most complex deployment processes in DevOps. A security vulnerability exists in HCL Technologies HCL Launch that stems from the fact that its Launch...

PT-2022-26436 · Hcl · Hcl Launch

Name of the Vulnerable Software and Affected Versions: HCL Launch affected versions not specified Description: The issue allows a user with administrative privileges, including "Manage Security" permissions, to recover a credential previously saved for performing authenticated LDAP searches...

IBM UrbanCode Deploy 安全漏洞

IBM UrbanCode Deploy UCD is a set of application automation deployment tools from International Business Machines IBM. The tool is based on an application deployment automation management information model, and through remote agent technology, to realize the automation of complex applications in...

CVE-2022-0019

An insufficiently protected credentials vulnerability exists in the Palo Alto Networks GlobalProtect app on Linux that exposes the hashed credentials of GlobalProtect users that saved their password during previous GlobalProtect app sessions to other local users on the system. The exposed...

CVE-2022-0019

An insufficiently protected credentials vulnerability exists in the Palo Alto Networks GlobalProtect app on Linux that exposes the hashed credentials of GlobalProtect users that saved their password during previous GlobalProtect app sessions to other local users on the system. The exposed...

CVE-2019-20150

In TreasuryXpress 19191105, a logged-in user can discover saved credentials, even though the UI hides them. Using functionality within the application and a malicious host, it is possible to force the application to expose saved SSH/SFTP credentials. This can be done by using the application's...

CVE-2019-20150

In TreasuryXpress 19191105, a logged-in user can discover saved credentials, even though the UI hides them. Using functionality within the application and a malicious host, it is possible to force the application to expose saved SSH/SFTP credentials. This can be done by using the application's...

CVE-2019-20150

CVE-2019-20150 affects TreasuryXpress 19191105. A logged-in user can reveal saved SSH/SFTP credentials by manipulating the app’s editor to point the SFTP Host IP at a malicious host and then invoking Check Connectivity, causing the application to send saved credentials to the attacker-controlled ...

Trillian Instant Messaging 0.x - Credential Encryption

// source: https://www.securityfocus.com/bid/5677/info The Trillian instant messaging client uses weak encryption to store saved authentication credentials for instant messaging services. The credentials are encrypted by using XOR with a static key that is used with every installation of the...