BenoitC Hackney trust management issue vulnerability

Versions 2.0.0 through 4.9.0 of benoitc hackney contain a trust management vulnerability stemming from insufficient credential protection. When followredirect is enabled, only the hostname is compared; authentication information is not stripped when redirecting to another protocol or port. This m...

boneIO black_debian_images trust management issue vulnerability

In boneIO blackdebianimages versions 1.2.0 through 1.6.0, there is a trust management vulnerability. This arises because the Mosquitto MQTT agent on all devices uses the same default credentials, and no changes are indicated in the documentation. Remote attackers can exploit this to gain full...

NewType Infortech NT OneAPP trust management issue vulnerability

NewType Infortech NT OneAPP versions 1.5.22 and earlier contain a trust management vulnerability. This vulnerability stems from hard-coded credentials; unauthenticated remote attackers can obtain these hard-coded encryption keys and decrypt login request contents, thereby gaining users’ plaintext...

GitLab trust management issue vulnerability

GitLab EE versions prior to 17.8 through 19.3.6, 19.4 through 19.4.3, and 19.5 through 19.5.1 contain a trust management vulnerability. This vulnerability stems from insufficient server-side validation during billing eligibility checks, potentially allowing authenticated users to access paid AI...

Vulnerability related to trust management issues in HCL AppScan integration with Azure Boards for ASoC & A360

The HCL AppScan integration with Azure Boards for ASoC and A360 version 1.0.0 contains a trust management vulnerability. This vulnerability arises because sensitive information can be accessed in plaintext during pipeline execution. Even though it is masked in the user interface, it may still be...

NewType Infortech NT OneAPP trust management issue vulnerability

NewType Infortech NT OneAPP versions 1.5.22 and earlier contain a trust management vulnerability. This vulnerability arises because WebView fails to validate origins; as a result, an HTTP Basic Authentication query is triggered, potentially allowing unauthenticated remote attackers to obtain the...

Drupal SAML SSO – Service Provider trust management issue vulnerability

Drupal SAML SSO – Versions 0.0.0 through 3.2.0 contain a trust management vulnerability caused by the use of hard-coded credentials. This may lead to the retrieval of sensitive embedded data...

Best Practice Software Bp Premier Trust Management Vulnerability

The Best Practice Software Bp Premier versions prior to 1.14.1.1128 have a vulnerability related to trust management. This vulnerability arises from the use of a hardcoded Microsoft SQL Server management password shared across all installations. An attacker with network access to database instanc...

D-Link DHP-W610AV Trust Management Vulnerability

The D-Link DHP-W610AV 1.02EUb03 version has a trust management vulnerability. This vulnerability stems from incorrect handling of the parameter “Password” in the “loginpreparehnap” function of the HNAP Login component. As a result, the password in the configuration file may become empty, allowing...

Cisco TelePresence Video Communication Server Expressway Trust Management Vulnerability

The Cisco TelePresence Video Communication Server Expressway has a vulnerability related to trust management. This vulnerability stems from the use of persistent cookies. When the cluster’s TLS authentication mode is enabled, insufficient client certificate verification occurs. This may allow...

D-Link DCS-6501LH Trust Management Vulnerability

The D-Link DCS-6501LH running version 3.03.02 contains a trust management vulnerability. This vulnerability stems from operations performed by the mydlinksetrootpwd function within the file /mnt/mtd/aoniipc, potentially allowing the use of weak credentials...

curl trust management issue vulnerability

The curl version 7.62.0 to 8.22.0 has a trust management issue. This issue arises from the CURLOPTEFFECTIVEURL option in curleasygetinfo, which may unexpectedly return a URL containing credentials. This occurs even when the URL provided to libcurl and the redirection URL do not contain credential...

Diem project: Trust management issues and vulnerabilities

The Diem project versions 5.1.3 and earlier have a vulnerability related to trust management. This vulnerability stems from improper handling of unknown code in the file dmCorePlugin/lib/data/dmDataLoad.php. It may allow remote exploitation if a default password is used...

Florian Rival GDevelop Trust Management Vulnerability

Florian Rival’s GDevelop 5.6.284 and earlier versions have a trust management vulnerability. This vulnerability arises from the resource URLs in the project files being controlled by attackers. As a result, the downloadLocalFile function sends the gdresource cookie to the attacker’s server,...

Vanus-Labs Vanus Trust Management Vulnerability

In the versions of Vanus-Labs’ Vanus from 0.8.0 to 0.9.0, there are security vulnerabilities related to trust management. These vulnerabilities stem from the use of default credentials and a hardcoded admin token. This allows unauthenticated remote attackers to obtain cluster-admin access rights...

Coder Trust Management Vulnerabilities

The Coder 2.34.7 version had a trust management vulnerability. This vulnerability stemmed from the ExtractRealIPAddress middleware trusting the leftmost X-Forwarded-For value provided by the client, rather than the client IP added by the reverse proxy. This allowed attackers to bypass login...

WHEELS.DEV: Vulnerabilities in Wheel Trust Management

WHEELS.DEV: Wheels 4.1.1 and earlier versions have a trust management vulnerability. This vulnerability stems from the default production error email address being derived from the Host header requested when the application is launched. When there is no explicit recipient for the error emails and...

Lenovo Smart Camera C33 Trust Management Vulnerability

Lenovo Smart Camera C33 versions prior to 05.02.31.140 have a vulnerability in trust management, which allows unauthorized remote users to disclose sensitive information...

Lenovo Idea Tab Pro (TB373FU) has vulnerabilities related to trust management.

The Lenovo Idea Tab Pro TB373FU has a trust management vulnerability. This vulnerability arises because users with physical access rights can access unlocked tablets, bypassing device protections and executing arbitrary code...

WHEELS.DEV: Vulnerabilities in Wheel Trust Management

WHEELS.DEV Wheels version 4.0.6 to 4.1.2 has a trust management vulnerability. This vulnerability arises from unverified clients being able to switch requests to an independent test application context including the production environment by providing arbitrary values for the X-Wheels-Test-Contex...