EUVD-2021-24741

Malware in sbrugna...

CVE-2021-38283

Wipro Holmes Orchestrator 20.4.1 20.4.102112020 allows remote attackers to read application log files containing sensitive information via a predictable /log URI...

CVE-2013-3272

EMC Replication Manager RM before 5.4.4 places encoded passwords in application log files, which makes it easier for local users to obtain sensitive information by reading a file and conducting an unspecified decoding attack...

CVE-2022-39821

In NOKIA 1350 OMS R14.2, an Insertion of Sensitive Information into an Application Log File vulnerability occurs. The web application stores critical information, such as cleartext user credentials, in world-readable files in the filesystem...

CVE-2021-38283

Wipro Holmes Orchestrator 20.4.1 20.4.102112020 allows remote attackers to read application log files containing sensitive information via a predictable /log URI...

Design/Logic Flaw

Wipro Holmes Orchestrator 20.4.1 20.4.102112020 allows remote attackers to read application log files containing sensitive information via a predictable /log URI...

PT-2021-22015

Name of the Vulnerable Software and Affected Versions: Wipro Holmes Orchestrator version 20.4.1 Description: The issue allows remote attackers to read application log files containing sensitive information. This is achieved via a predictable "/log" URI. Recommendations: For Wipro Holmes...

Security Bulletin: Multiple vulnerabilities in IBM SPSS Collaboration and Deployment Services

Summary Multiple vulnerabilities exist in IBM SPSS Collaboration and Deployment Services. See the individual descriptions for details. Vulnerability Details VULNERABILITY DETAILS: CVEID: CVE-2013-4044 DESCRIPTION: An authenticated remote attacker can send a HTTP request to retrieve the content of...

Cross site request forgery (csrf)

IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote authenticated users to read application log files via a direct HTTP request...

PT-2013-4811

Name of the Vulnerable Software and Affected Versions IBM SPSS Collaboration and Deployment Services versions 4.2.1 through 4.2.1.3 IF2 and version 5.0 before FP3 Description The issue allows remote authenticated users to read application log files via a direct HTTP request. Recommendations For...

CVE-2013-4044: Exposure of Sensitive Information to an Unauthorized Actor

IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote authenticated users to read application log files via a direct HTTP request...

Design/Logic Flaw

EMC Replication Manager RM before 5.4.4 places encoded passwords in application log files, which makes it easier for local users to obtain sensitive information by reading a file and conducting an unspecified decoding attack...

PT-2013-4268

Name of the Vulnerable Software and Affected Versions EMC Replication Manager RM versions prior to 5.4.4 Description The issue allows local users to obtain sensitive information by reading application log files and conducting an unspecified decoding attack, as encoded passwords are stored in thes...