3357 matches found
CVE-2024-56353
In JetBrains TeamCity before 2024.12 backup file exposed user credentials and session cookies...
CVE-2024-56353
In JetBrains TeamCity before 2024.12 backup file exposed user credentials and session cookies...
CVE-2024-56353
In JetBrains TeamCity before 2024.12 backup file exposed user credentials and session cookies...
CVE-2024-56353
JetBrains TeamCity is affected by CVE-2024-56353. Before version 2024.12, backup files can disclose sensitive data, exposing user credentials and session cookies. Root cause is exposure via backup artifacts; impact is information disclosure with confidentiality at risk (credentials and cookies). ...
JetBrains TeamCity 安全漏洞
JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. An information disclosure vulnerability exists in...
CVE-2024-37649
Insecure Permissions vulnerability in SecureSTATION v.2.5.5.3116-S50-SMA-B20160811A and before allows a physically proximate attacker to obtain sensitive information via the modification of user credentials...
CVE-2024-52361
IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.9 stores user credentials in plain text which can be read by an authenticated user with access to the pod...
CVE-2023-50956
IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.9 could allow a privileged user to obtain highly sensitive user credentials from secret keys that are stored in clear text...
CVE-2024-52361
The CVE-2024-52361 entry concerns IBM Storage Defender – Resiliency Service versions 2.0.0–2.0.9, where user credentials are stored in plain text reachable by an authenticated user with pod access. This information disclosure is confirmed by multiple sources (IBM Security Bulletin and CVE records...
CVE-2024-52361 IBM Storage Defender - Resiliency Service information disclosure
IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.9 stores user credentials in plain text which can be read by an authenticated user with access to the pod...
CVE-2023-50956
IBM Storage Defender – Resiliency Service 2.0.0–2.0.9 exposes highly sensitive credentials due to secret keys stored in clear text. The CVE-2023-50956 entry notes privilege escalation risk for a privileged user with HIGH privileges and potential confidentiality impact. IBM’s remediation requires ...
CVE-2023-50956 IBM Storage Defender - Resiliency Service information disclosure
IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.9 could allow a privileged user to obtain highly sensitive user credentials from secret keys that are stored in clear text...
CVE-2023-50956 IBM Storage Defender - Resiliency Service information disclosure
IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.9 could allow a privileged user to obtain highly sensitive user credentials from secret keys that are stored in clear text...
CVE-2024-37649
Insecure Permissions vulnerability in SecureSTATION v.2.5.5.3116-S50-SMA-B20160811A and before allows a physically proximate attacker to obtain sensitive information via the modification of user credentials...
CVE-2024-37649
A security vulnerability exists in SecureSTATION v.2.5.5.3116-S50-SMA-B20160811A and prior versions due to Insecure Permissions (CWE-281). This flaw allows a physically proximate attacker to obtain sensitive information by modifying user credentials. While the documents do not provide a specific ...
CVE-2024-49817
IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 stores user credentials in configuration files which can be read by a local privileged user...
CVE-2024-49817 IBM Security Guardium Key Lifecycle Manager information disclosure
IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 stores user credentials in configuration files which can be read by a local privileged user...
CVE-2024-49817 IBM Security Guardium Key Lifecycle Manager information disclosure
IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 stores user credentials in configuration files which can be read by a local privileged user...
CVE-2024-49817
The CVE-2024-49817 issue in IBM Security Guardium Key Lifecycle Manager (GKLM) affects versions 4.1, 4.1.1, 4.2, and 4.2.1, where user credentials are stored in configuration files that can be read by a local privileged user (CWE-260). The IBM Security bulletin describes this as a local informati...