CVE-2021-29904: Cleartext Storage of Sensitive Information

IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbusGUI displays user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 207610...

Cisco SD-WAN vManage Software Disaster Recovery Feature Password Exposure Vulnerability

A vulnerability in the disaster recovery feature of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain unauthorized access to user credentials. This vulnerability exists because access to API endpoints is not properly restricted. An attacker could exploit this...

Security Bulletin: IBM Jazz for Service Management displays user credentials in plain clear text which can be read by a local user (CVE-2021-29904)

Summary IBM Jazz for Service Management displays user credentials in plain clear text which can be read by a local user. Vulnerability Details CVEID: CVE-2021-29904 DESCRIPTION: IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbusGUI displays user credentials in plain clear text which c...

IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI Information Disclosure Vulnerability (CNVD-2021-101978)

IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbusGUI are both products of IBM Corporation, U.S.A. IBM Jazz for Service Management is an integrated service management product that provides visibility into the service management environment. IBM Tivoli Netcool/OMNIbusGUI is a graphical...

Oracle Linux 8 : curl (ELSA-2021-3582)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-3582 advisory. - fix bad connection reuse due to flawed path name checks CVE-2021-22924 Tenable has extracted the preceding description block directly from the Oracle...

CVE-2021-29811

IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbusGUI 8.1.0 stores user credentials in plain clear text which can be read by an authenticated admin user. IBM X-Force ID: 204329...

Code injection

IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbusGUI 8.1.0 stores user credentials in plain clear text which can be read by an authenticated admin user. IBM X-Force ID: 204329...

CVE-2021-29811

IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbusGUI 8.1.0 stores user credentials in plain clear text which can be read by an authenticated admin user. IBM X-Force ID: 204329...

CVE-2021-29811

The CVE-2021-29811 entry affects IBM Tivoli Netcool/OMNIbus_GUI WebGUI in the 8.1.x line. The root cause is storing user credentials in plain clear text, which can be read by an authenticated admin user, constituting an information disclosure vulnerability. The vulnerability affects IBM Jazz for ...

PT-2021-18493

Name of the Vulnerable Software and Affected Versions IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus GUI version 8.1.0 Description The issue allows an authenticated admin user to read user credentials stored in plain clear text. Recommendations For IBM Jazz for Service Management...

Wordpress BulletProof Security Backup Disclosure

The Wordpress plugin BulletProof Security, versions use auxiliary/scanner/http/wp/bulletproofsecuritybackups msf undefinedbulletproofsecuritybackups show actions ...actions... msf undefinedbulletproofsecuritybackups set ACTION msf undefinedbulletproofsecuritybackups show options ...show and set...

Amazon Linux 2 : curl, --advisory ALAS2-2021-1700 (ALAS-2021-1700)

The version of curl installed on the remote host is prior to 7.76.1-7. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2021-1700 advisory. A flaw was found in curl in the way curl handles a file hash mismatch after downloading content using the Metalink feature...

CVE-2021-1873

An API issue in Accessibility TCC permissions was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave. A malicious application may be able to unexpectedly leak a user's credentials from secure text...

Design/Logic Flaw

An API issue in Accessibility TCC permissions was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave. A malicious application may be able to unexpectedly leak a user's credentials from secure text...

secure USB management solution SQL注入漏洞

secure USB management solution is kingston's easy way to manage encrypted USB drives for increased data security. The secure USB management solution suffers from a SQL injection vulnerability that could be exploited by a remote, unauthenticated attacker to execute SQL queries to access usernames,...

Protect

A cleartext storage in a file or on disk CWE-313 vulnerability in FortiOS SSL VPN may allow an attacker to retrieve a logged-in SSL VPN user's credentials should that attacker be able to read the session file stored on the targeted device's system...

PT-2021-4897

Name of the Vulnerable Software and Affected Versions D-LINK-DIR-605 B2 Firmware version 2.01MT Description An information disclosure issue exists, allowing an attacker to obtain a user name and password by forging a post request to the "getcfg.php" page. This is due to insufficient protection of...

CVE-2021-34564

Any cookie-stealing vulnerabilities within the application or browser would enable an attacker to steal the user's credentials to the PEPPERL+FUCHS WirelessHART-Gateway 3.0.9...

CVE-2021-1592

A vulnerability in the way Cisco UCS Manager software handles SSH sessions could allow an authenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to improper resource management for established SSH sessions. An attacker could...

in zoujingli/thinkadmin

✍️ Description The application implements a cross-origin resource sharing CORS policy for requests that allows access from any domain. 🕵️‍♂️ Proof of Concept Request GET /data/shop.goods/index.html HTTP/2 Host: testdomain11.com Cookie: lang=zh-cn; PHPSESSID=45780759c5ea6ae0be9cfc95fde04bc9...