CVE-2023-50776

Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier stores PaaSLane authentication tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...

CVE-2023-50776

CVE-2023-50776 affects Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier. The vulnerability arises from storing PaaSLane authentication tokens unencrypted in job config.xml files on the Jenkins controller, enabling visibility to users with Item/Extended Read permission or someone with filesystem...

CVE-2023-50776

Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier stores PaaSLane authentication tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...

CVE-2023-50772

CVE-2023-50772 affects the Jenkins Dingding JSON Pusher Plugin 2.0 and earlier. The issue is that access tokens are stored unencrypted in job config.xml files on the Jenkins controller, enabling viewing by users with Item/Extended Read permission or access to the controller file system. The conne...

CVE-2023-50772

Jenkins Dingding JSON Pusher Plugin 2.0 and earlier stores access tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...

CVE-2023-50772

Jenkins Dingding JSON Pusher Plugin 2.0 and earlier stores access tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...

CVE-2023-50772

Jenkins Dingding JSON Pusher Plugin 2.0 and earlier stores access tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...

PT-2023-31645

Name of the Vulnerable Software and Affected Versions Jenkins PaaSLane Estimate Plugin versions 1.0.4 and earlier Description The issue concerns the storage of PaaSLane authentication tokens in an unencrypted manner within job config.xml files on the Jenkins controller. This allows users with...

PT-2023-31641

Name of the Vulnerable Software and Affected Versions Jenkins Dingding JSON Pusher Plugin versions 2.0 and earlier Description The issue concerns the storage of access tokens in an unencrypted manner within job config.xml files on the Jenkins controller. This allows users with Item/Extended Read...

Jenkins PaaSLane Estimate Plugin Security Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

TRACE MODE SCADA Unencrypted Credentials Hash Replacement

The vulnerability of the TRACE MODE SCADA system is related to the unencrypted storage of user credentials. Exploiting this vulnerability could allow a perpetrator to replace the password hash for one user with that of another user and gain access to the SCADA system...

SCADA TRACE MODE Credential Storage Unauthorized Permission Change

The vulnerability of the SCADA system TRACE MODE is related to the unencrypted storage of user credentials. Exploiting this vulnerability can allow a intruder to alter user permissions in such a way that higher privileges are granted to the desired user...

ASUS RT-AC66U Unencrypted Credentials Disclosure

The vulnerability of ASUS RT-AC66U router’s microprogramming software is related to the transmission of credentials in an unencrypted form. Exploiting this vulnerability can allow a remote attacker to disclose the protected information...

H2 Privilege Escalation

The vulnerability of the H2.svz database management system’s web interface relates to the unencrypted storage of confidential information. Exploiting this vulnerability can allow attackers to enhance their privileges...

Code injection

The affected devices transmit sensitive information unencrypted allowing a remote unauthenticated attacker to capture and modify network traffic...

CVE-2023-39172

CVE-2023-39172 affects SENEC ENBW Legacy Storage Box series (V1, V2, V3). The root cause is that the devices transmit sensitive information unencrypted over the network, enabling a remote unauthenticated attacker to capture and modify traffic. The NVD entry assigns a CRITICAL CVSS v3.1 score (9.1...

CVE-2023-39172 SENEC: Storage Box V1,V2 and V3 transmitting sensitive data unencrypted

The affected devices transmit sensitive information unencrypted allowing a remote unauthenticated attacker to capture and modify network traffic...

EnBw SENEC Legacy Storage Box Security Vulnerability

The EnBw SENEC Legacy Storage Box is a series of storage boxes from German company EnBw. A security vulnerability exists in EnBw SENEC Legacy Storage Box versions V1, V2, and V3, which stems from the affected devices transmitting unencrypted sensitive information, and can be exploited by an...

PT-2023-26827 · Senec +1 · Storage Box V1 +3

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue allows a remote unauthenticated attacker to capture and modify network traffic because sensitive information is transmitted unencrypted. Recommendations: At the moment, there is ...

Nautobot Unencrypted Credentials

The vulnerability of the Nautobot network infrastructure management software is related to the unencrypted storage of credentials. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality of information...