CVE-2023-31300

CVE-2023-31300 affects Sesami CPTO v6.3.8.6, enabling remote attackers to obtain sensitive information via unencrypted credentials transmitted during Password Reset. Root cause: transmission of plaintext credentials. Impact: potential confidentiality breach (HIGH). No exploit specifics provided i...

PT-2023-23287 · Unknown · Sesami Cash Point & Transport Optimizer

Name of the Vulnerable Software and Affected Versions: Sesami Cash Point & Transport Optimizer CPTO version 6.3.8.6 Description: An issue in Sesami Cash Point & Transport Optimizer CPTO allows remote attackers to obtain sensitive information via transmission of unencrypted, cleartext credentials...

The vulnerability of the Nagios XI monitoring tool, related to unencrypted storage of account data, allows a hacker to manipulate the account data of external hosts by using encrypted Ansible files.

The vulnerability of Nagios XI monitoring tool is related to the unencrypted storage of credentials. Exploiting this vulnerability can allow an attacker to gain unauthorized access to credentials for external hosts from encrypted Ansible files...

The vulnerability of the TRACE MODE SCADA system, related to unencrypted storage of user credentials, allows a hacker to replace one user’s password hash with another and gain access to the SCADA system.

The vulnerability of the TRACE MODE SCADA system is related to the unencrypted storage of user credentials. Exploiting this vulnerability could allow a perpetrator to replace the password hash for one user with that of another user and gain access to the SCADA system...

The vulnerability of ASUS RT-AC66U router’s microprogramming software, related to the transmission of credentials in an unencrypted form, allows a hacker to disclose the protected information.

The vulnerability of ASUS RT-AC66U router’s microprogramming software is related to the transmission of credentials in an unencrypted form. Exploiting this vulnerability can allow a remote attacker to disclose the protected information...

The vulnerability of the SCADA system TRACE MODE, related to unencrypted storage of user credentials, allows a intruder to alter user permissions.

The vulnerability of the SCADA system TRACE MODE is related to the unencrypted storage of user credentials. Exploiting this vulnerability can allow a intruder to alter user permissions in such a way that higher privileges are granted to the desired user...

PT-2023-6874 · Comos · Comos

Name of the Vulnerable Software and Affected Versions: COMOS versions prior to V10.4.4 Description: The issue is related to the transmission of credentials in unencrypted form, potentially allowing a remote attacker to access configuration data. The caching system in the affected application leak...

PT-2023-7762 · Nagios · Nagios Xi

Name of the Vulnerable Software and Affected Versions: Nagios XI affected versions not specified Description: The issue is related to the unencrypted storage of credentials in the config.inc.php script of the Nagios XI monitoring tool. This could allow a remote attacker to gain unauthorized acces...

The vulnerability of the unified management system of the Fujitsu Software Infrastructure Manager, related to unencrypted storage of user credentials, allows a perpetrator to escalate their privileges.

The vulnerability of the unified management system of the Fujitsu Software Infrastructure Manager lies in the unencrypted storage of account data. Exploiting this vulnerability could allow a malicious actor to enhance their privileges by gaining access to the account data stored on the proxy...

CVE-2023-21409

Due to insufficient file permissions, unprivileged users could gain access to unencrypted administrator credentials allowing the configuration of the application...

CVE-2023-21408

Due to insufficient file permissions, unprivileged users could gain access to unencrypted user credentials that are used in the integration interface towards 3rd party systems...

CVE-2023-21409

Due to insufficient file permissions, unprivileged users could gain access to unencrypted administrator credentials allowing the configuration of the application...

CVE-2023-21408

Due to insufficient file permissions, unprivileged users could gain access to unencrypted user credentials that are used in the integration interface towards 3rd party systems...

CVE-2023-21409

CVE-2023-21409: The issue is described as insufficient file permissions that allow unprivileged users to access unencrypted administrator credentials and configure the application. The Red Hat entry reiterates this description. No concrete remediation, affected product/version specifics, exploit ...

AXIS License Plate Verifier Security Vulnerability

AXIS License Plate Verifier is a license plate verifier from AXIS Sweden. Ideal for free flow, low speed traffic and vehicle access control scenarios, it makes detecting and reading license plates easy. AXIS License Plate Verifier 2.8.3 and prior versions contain a security vulnerability that ste...

CVE-2023-20207

A vulnerability in the logging component of Cisco Duo Authentication Proxy could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. This vulnerability exists because certain unencrypted credentials are stored. An attacker could exploit this...

CVE-2023-20207

A vulnerability in the logging component of Cisco Duo Authentication Proxy could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. This vulnerability exists because certain unencrypted credentials are stored. An attacker could exploit this...

The vulnerability of the text field for entering the password of the KeePass password manager lies in the fact that user credentials are stored in an unencrypted form. This allows a hacker to retrieve the master password in its raw form.

The vulnerability of the password input field for the KeePass password manager’s administrator password storage is related to the storage of user data in an unencrypted form. Exploiting this vulnerability could allow a malicious actor to retrieve the master password in its raw form...

The vulnerability of the Teacher Console component in the Faronics Insight computer network management platform allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Teacher Console component in the Faronics Insight computer network management platform is related to the unencrypted storage of user credentials during the processing of consoleSettings. Exploiting this vulnerability can allow an attacker to gain unauthorized access to...

The vulnerability of the samba-tool utility in the Samba networking communication software package allows a hacker to gain unauthorized access to the device.

The vulnerability of the samba-tool tool in the Samba networking software package is related to the transmission of credentials in an unencrypted form when working with an LDAP server. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to the device...