IBM Storage Defender Plaintext Transfer Vulnerability

IBM Storage Defender is a solution from International Business Machines IBM that provides end-to-end data resiliency. A plaintext transfer vulnerability exists in IBM Storage Defender versions 2.0.0 through 2.0.9, which stems from the presence of keys stored in plaintext and can be exploited by a...

CVE-2024-56353

In JetBrains TeamCity before 2024.12 backup file exposed user credentials and session cookies...

CVE-2024-56353

In JetBrains TeamCity before 2024.12 backup file exposed user credentials and session cookies...

CVE-2024-56353

JetBrains TeamCity is affected by CVE-2024-56353. Before version 2024.12, backup files can disclose sensitive data, exposing user credentials and session cookies. Root cause is exposure via backup artifacts; impact is information disclosure with confidentiality at risk (credentials and cookies). ...

CVE-2024-56353

In JetBrains TeamCity before 2024.12 backup file exposed user credentials and session cookies...

CVE-2024-56353

In JetBrains TeamCity before 2024.12 backup file exposed user credentials and session cookies...

JetBrains TeamCity 安全漏洞

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. An information disclosure vulnerability exists in...

CVE-2024-37649

Insecure Permissions vulnerability in SecureSTATION v.2.5.5.3116-S50-SMA-B20160811A and before allows a physically proximate attacker to obtain sensitive information via the modification of user credentials...

CVE-2024-52361

IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.9 stores user credentials in plain text which can be read by an authenticated user with access to the pod...

CVE-2023-50956

IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.9 could allow a privileged user to obtain highly sensitive user credentials from secret keys that are stored in clear text...

CVE-2024-52361

The CVE-2024-52361 entry concerns IBM Storage Defender – Resiliency Service versions 2.0.0–2.0.9, where user credentials are stored in plain text reachable by an authenticated user with pod access. This information disclosure is confirmed by multiple sources (IBM Security Bulletin and CVE records...

CVE-2024-52361 IBM Storage Defender - Resiliency Service information disclosure

IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.9 stores user credentials in plain text which can be read by an authenticated user with access to the pod...

CVE-2023-50956 IBM Storage Defender - Resiliency Service information disclosure

IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.9 could allow a privileged user to obtain highly sensitive user credentials from secret keys that are stored in clear text...

CVE-2023-50956 IBM Storage Defender - Resiliency Service information disclosure

IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.9 could allow a privileged user to obtain highly sensitive user credentials from secret keys that are stored in clear text...

CVE-2023-50956

IBM Storage Defender – Resiliency Service 2.0.0–2.0.9 exposes highly sensitive credentials due to secret keys stored in clear text. The CVE-2023-50956 entry notes privilege escalation risk for a privileged user with HIGH privileges and potential confidentiality impact. IBM’s remediation requires ...

CVE-2024-37649

Insecure Permissions vulnerability in SecureSTATION v.2.5.5.3116-S50-SMA-B20160811A and before allows a physically proximate attacker to obtain sensitive information via the modification of user credentials...

CVE-2024-37649

In SecureSTATION, versions up to 2.5.5.3116-S50-SMA-B20160811A (and earlier) are affected by an Insecure Permissions vulnerability. A physically proximate attacker could modify user credentials to obtain sensitive information, exposing confidentiality (C=High) with no impact on integrity or avail...

CVE-2024-49817

IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 stores user credentials in configuration files which can be read by a local privileged user...

CVE-2024-49817

The CVE-2024-49817 issue in IBM Security Guardium Key Lifecycle Manager (GKLM) affects versions 4.1, 4.1.1, 4.2, and 4.2.1, where user credentials are stored in configuration files that can be read by a local privileged user (CWE-260). The IBM Security bulletin describes this as a local informati...

CVE-2024-49817 IBM Security Guardium Key Lifecycle Manager information disclosure

IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 stores user credentials in configuration files which can be read by a local privileged user...