388 matches found
Jenkins plugin Stack Hammer 访问控制错误漏洞
Jenkins and Jenkins plugin are both Jenkins open source products.Jenkins is an application software. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins plugin is an application software plugin. An access control...
Jenkins plugin Cadence vManager 安全漏洞
Jenkins and Jenkins plugin are both Jenkins open source products.Jenkins is an application software. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins plugin is an application software plugin. A security...
The vulnerability of the IBM Security QRadar EDR endpoint protection mechanism, related to the unencrypted storage of critical information, allows attackers to gain unauthorized access to the protected data.
The vulnerability of the IBM Security QRadar EDR endpoint protection mechanism lies in the unencrypted storage of critical information. Exploiting this vulnerability could allow attackers to gain unauthorized access to the protected data...
The vulnerability of the software products of the LLC “NPO ‘MIR’, related to the unencrypted storage of account data, allows a perpetrator to disclose protected information.
The vulnerability of the software products developed by LLC “NPO ‘MIR’ lies in the unencrypted storage of account data. Exploiting this vulnerability could allow an attacker to disclose the protected information...
The vulnerability of the mySCADA myPRO Manager platform, related to the unencrypted storage of critical information, allows a intruder to gain unauthorized access to protected data.
The vulnerability of the mySCADA myPRO Manager platform is related to the unencrypted storage of critical information. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...
The vulnerability of the Dell VxRail hyper-converged infrastructure, related to the unencrypted storage of critical information, allows a intruder to disclose protected data.
The vulnerability of the Dell VxRail hyper-converged infrastructure is related to the unencrypted storage of critical information. Exploiting this vulnerability could allow an attacker to disclose the protected data...
The vulnerability of the Dell VxRail hyper-converged infrastructure, related to the unencrypted storage of critical information, allows a intruder to disclose protected data.
The vulnerability of the Dell VxRail hyper-converged infrastructure is related to the unencrypted storage of critical information. Exploiting this vulnerability could allow an attacker to disclose the protected data...
The vulnerability of the ActiveMQ broker platform’s security features, involving the storage of sensitive information in unencrypted form, allows attackers to disclose the protected information.
The vulnerability of the ActiveMQ messaging broker, within the Cortex XSOAR and Cortex XSIAM security platforms, relates to the storage of sensitive information in unencrypted form. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...
CVE-2023-29114 Unauthorized System Log Disclosure in Enel X JuiceBox
System logs could be accessed through web management application due to a lack of access control. An attacker can obtain the following sensitive information: • Wi-Fi access point credentials to which the EV charger can connect. • APN web address and credentials. • IPSEC credentials...
PT-2024-7785 · Palo Alto Networks +1 · Cortex Xsiam +2
Name of the Vulnerable Software and Affected Versions: Cortex XSOAR and Cortex XSIAM affected versions not specified Description: The issue is related to the storage of protected information in an unencrypted form in the ActiveMQ message broker integration. This could allow a remote attacker to...
PT-2024-8094 · Cisco · Cisco Ios Xr
Name of the Vulnerable Software and Affected Versions: Cisco IOS XR Software affected versions not specified Description: A vulnerability in the storage method of the PON Controller configuration file could allow an authenticated, local attacker with low privileges to obtain the MongoDB...
ROS-20240902-20
A vulnerability in the KeePass password manager is related to unencrypted storage of critical information. Exploitation of the vulnerability could allow an attacker to obtain passwords in clear form...
PT-2024-6126 · Ibm · Ibm Qradar Suite +1
Name of the Vulnerable Software and Affected Versions: IBM QRadar Suite Software versions 1.10.12.0 through 1.10.23.0 IBM Cloud Pak for Security versions 1.10.0.0 through 1.10.11.0 Description: The issue is related to the storage of user credentials in plain clear text, which can be read by a loc...
The vulnerability of platformes for monitoring events, detecting threats, and performing security analytics in IBM QRadar Suite and IBM Cloud Pak for Security lies in the fact that protected information is stored in unencrypted form, allowing attackers to gain unauthorized access to this protected information.
The vulnerabilities of event monitoring platforms, threat detection systems, and security analytics tools from IBM QRadar Suite and IBM Cloud Pak for Security are related to the storage of protected information in unencrypted form. Exploiting these vulnerabilities can allow attackers to gain...
The vulnerability in the web-based client of IBM Datacap Navigator software for document collection and processing involves the unencrypted storage of critical information, allowing an intruder to gain unauthorized access to protected data.
The vulnerability of the IBM Datacap Navigator web client software for document collection and processing involves the unencrypted storage of critical information. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected data...
SyroTech SY-GPON-1110-WDONT Information Disclosure Vulnerability (CNVD-2024-34372)
The SyroTech SY-GPON-1110-WDONT is a wireless router from SyroTech. The SyroTech SY-GPON-1110-WDONT suffers from an information disclosure vulnerability that stems from unencrypted storage of WPA/WPS credentials in the router firmware/database. An attacker can exploit this vulnerability to obtain...
The vulnerabilities of the event monitoring, threat detection, and security analytics platforms of the IBM QRadar Suite, as well as the IBM Cloud Pak for Security security platform, stem from the storage of protected information in unencrypted form. This allows attackers to exploit these vulnerabilities to disclose protected information.
The vulnerabilities of event monitoring platforms, threat detection systems, security analytics, and IBM QRadar Suite, as well as IBM Cloud Pak for Security, are related to the storage of protected information in unencrypted form. Exploiting these vulnerabilities can allow attackers to gain...
The vulnerability in the web-based client of IBM Datacap software for document collection and processing involves the unencrypted storage of confidential information, allowing an intruder to gain unauthorized access to protected data.
The vulnerability in the web-based client of IBM Datacap software for document collection and processing involves the unencrypted storage of confidential information. Exploiting this vulnerability could allow an attacker to gain unauthorized access to the protected information...
PT-2024-5033 · Ibm · Ibm Datacap Navigator
Name of the Vulnerable Software and Affected Versions: IBM Datacap Navigator versions 9.1.5 through 9.1.9 Description: The issue is related to the temporary storage of data from different environments in an unencrypted manner, which could be obtained by a malicious user. This could allow an...
Secret file credentials stored unencrypted in rare cases by Plain Credentials Plugin
When creating secret file credentials Plain Credentials Plugin 182.v468b97b9dcb8 and earlier attempts to decrypt the content of the file to check if it constitutes a valid encrypted secret. In rare cases the file content matches the expected format of an encrypted secret, and the file content wil...