CVE-2022-39820: Insufficiently Protected Credentials

In Network Element Manager in NOKIA NFM-T R19.9, an Unprotected Storage of Credentials vulnerability occurs under /root/RestUploadManager.xml.DRC and /DEPOT/KECustom199/OTNEDRC/RestUploadManager.xml. A remote user, authenticated to the operating system, with access privileges to the directory /ro...

CVE-2022-39820

In Network Element Manager in NOKIA NFM-T R19.9, an Unprotected Storage of Credentials vulnerability occurs under /root/RestUploadManager.xml.DRC and /DEPOT/KECustom199/OTNEDRC/RestUploadManager.xml. A remote user, authenticated to the operating system, with access privileges to the directory /ro...

PT-2022-15522

Name of the Vulnerable Software and Affected Versions Dell EMC System Update versions 1.9.2 and prior Description The issue concerns an Unprotected Storage of Credentials, which could be exploited by a local attacker with user privileges, potentially leading to the disclosure of user passwords...

CVE-2020-27557: Insufficiently Protected Credentials

Unprotected Storage of Credentials vulnerability in BASETech GE-131 BT-1837836 firmware 20180921 allows local users to gain access to the video streaming username and password via SQLite files containing plain text credentials...

PT-2020-16705

Name of the Vulnerable Software and Affected Versions BASETech GE-131 BT-1837836 firmware version 20180921 Description The issue allows local users to gain access to the video streaming username and password via SQLite files containing plain text credentials. This is due to an Unprotected Storage...

Rockwell Automation ISaGRAF5 Runtime (Update A)

1. EXECUTIVE SUMMARY CVSS v3 9.1 ATTENTION: Exploitable remotely/low attack complexity Vendor: Rockwell Automation Equipment: ISaGRAF5 Runtime Vulnerabilities: Use of Hard-coded Cryptographic Key, Unprotected Storage of Credentials, Relative Path Traversal, Uncontrolled Search Path Element,...

PT-2020-19541

Name of the Vulnerable Software and Affected Versions McAfee Data Loss Prevention DLP for Mac versions prior to 11.5.2 Description The issue allows local users to gain access to the RiskDB username and password via unprotected log files containing plain text credentials. This is due to an...

Grundfos CIM 500

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Grundfos Pumps Corporation Equipment: CIM 500 Vulnerabilities: Missing Authentication for Critical Function, Unprotected Storage of Credentials 2. RISK EVALUATION Successful exploitation of these...

CVE-2019-3663

Unprotected Storage of Credentials vulnerability in McAfee Advanced Threat Defense ATD prior to 4.8 allows local attacker to gain access to the root password via accessing sensitive files on the system. This was originally published with a CVSS rating of High, further investigation has resulted i...

CVE-2019-3663: Insufficiently Protected Credentials

Unprotected Storage of Credentials vulnerability in McAfee Advanced Threat Defense ATD prior to 4.8 allows local attacker to gain access to the root password via accessing sensitive files on the system. This was originally published with a CVSS rating of High, further investigation has resulted i...

CVE-2019-0072 SBR Carrier: A vulnerability in the identity and access management certificate generation procedure allows a local attacker to gain access to confidential information.

An Unprotected Storage of Credentials vulnerability in the identity and access management certificate generation procedure allows a local attacker to gain access to confidential information. This issue affects: Juniper Networks SBR Carrier: 8.4.1 versions prior to 8.4.1R13; 8.5.0 versions prior t...

CVE-2019-0072: Plaintext Storage of a Password

An Unprotected Storage of Credentials vulnerability in the identity and access management certificate generation procedure allows a local attacker to gain access to confidential information. This issue affects: Juniper Networks SBR Carrier: 8.4.1 versions prior to 8.4.1R13; 8.5.0 versions prior t...

PT-2019-4133

Name of the Vulnerable Software and Affected Versions Juniper Networks SBR Carrier versions 8.4.1 through 8.4.1R12 Juniper Networks SBR Carrier versions 8.5.0 through 8.5.0R3 Description The issue is related to an Unprotected Storage of Credentials vulnerability in the identity and access...