PT-2020-15338 · Jenkins · Jenkins Eagle Tester Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Eagle Tester Plugin versions 1.0.9 and earlier Description: The issue concerns the storage of a password in an unencrypted form in the global configuration file on the Jenkins master. This allows users with access to the master file...

PT-2020-15334 · Jenkins · Jenkins Digitalocean Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins DigitalOcean Plugin version 1.1 and earlier Description: The issue concerns the storage of a token in an unencrypted form within the global config.xml file on the Jenkins master. This token can be accessed by users who have permission...

PT-2020-15336 · Jenkins · Jenkins Bmc Release Package/Deployment Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins BMC Release Package and Deployment Plugin versions 1.1 and earlier Description: The issue allows credentials to be stored unencrypted in the global configuration file on the Jenkins master. This can be viewed by users with access to t...

PT-2020-15337 · Jenkins · Jenkins Ecx Copy Data Management Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins ECX Copy Data Management Plugin versions 1.9 and earlier Description: The issue allows users with Extended Read permission, or access to the master file system, to view a password stored unencrypted in job config.xml files on the...

PT-2020-15342 · Jenkins · Jenkins Applatix Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Applatix Plugin versions 1.1 and earlier Description: The issue allows unauthorized access to unencrypted passwords stored in job config.xml files on the Jenkins master. Users with Extended Read permission or access to the master file...

Security Vulnerabilities fixed in Thunderbird 68.5 — Mozilla

When processing an email message with an ill-formed envelope, Thunderbird could read data from a random memory location. If a user saved passwords before Thunderbird 60 and then later set a master password, an unencrypted copy of these passwords is still accessible. This is because the older stor...

CVE-2020-8507

The Citytv Video application 4.08.0 for Android and 3.35 for iOS sends Unencrypted Analytics...

CVE-2020-8506

The Global TV application 2.3.2 for Android and 4.7.5 for iOS sends Unencrypted Analytics...

CVE-2020-8506

The Global TV application 2.3.2 for Android and 4.7.5 for iOS sends Unencrypted Analytics...

CVE-2020-8507

The Citytv Video application 4.08.0 for Android and 3.35 for iOS sends Unencrypted Analytics...

Code injection

The Global TV application 2.3.2 for Android and 4.7.5 for iOS sends Unencrypted Analytics...

Design/Logic Flaw

The Citytv Video application 4.08.0 for Android and 3.35 for iOS sends Unencrypted Analytics...

CVE-2020-8506

The Global TV application 2.3.2 for Android and 4.7.5 for iOS sends Unencrypted Analytics...

CVE-2020-8506

The CVE-2020-8506 entry concerns the Global TV application (Android 2.3.2; iOS 4.7.5) that transmits analytics data unencrypted. The affected component is the application’s analytics/telemetry pathway, leading to a potential confidentiality impact as analytics could be observed in transit. Impact...

CVE-2020-8507

The Citytv Video application 4.08.0 for Android and 3.35 for iOS sends Unencrypted Analytics...

CVE-2020-8507

CVE-2020-8507 affects Citytv Video: Android 4.08.0 and iOS 3.35. The published reports describe the issue as the app sending unencrypted analytics data. The connected records corroborate this behavior but do not detail the exact root cause, affected components, or versions beyond the listed app v...

Information disclosure

IBM StoredIQ 7.6.0.17 through 7.6.0.20 could disclose sensitive information to a local user due to data in certain directories not being encrypted when it contained symbolic links. IBM X-Force ID: 175133...

CVE-2020-4224

IBM StoredIQ 7.6.0.17 through 7.6.0.20 could disclose sensitive information to a local user due to data in certain directories not being encrypted when it contained symbolic links. IBM X-Force ID: 175133...

IBM StoredIQ Information Disclosure Vulnerability

IBM StoredIQ is a suite of data visualization and processing platforms from IBM, USA. The platform provides scalable analytics and governance of unstructured data, as well as records management, storage optimization and migration of data. An information disclosure vulnerability exists in IBM...

CVE-2020-2107

Jenkins Fortify Plugin 19.1.29 and earlier stores proxy server passwords unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...