155 matches found
CVE-2022-47561
The web application stores credentials in clear text in the "admin.xml" file, which can be accessed without logging into the website, which could allow an attacker to obtain credentials related to all users, including admin users, in clear text, and use them to subsequently execute malicious...
Design/Logic Flaw
UNSUPPPORTED WHEN ASSIGNED The web application stores credentials in clear text in the "admin.xml" file, which can be accessed without logging into the website, which could allow an attacker to obtain credentials related to all users, including admin users, in clear text, and use them to...
CVE-2022-47561
CVE-2022-47561 concerns Ormazabal products where credentials are stored in clear text in admin.xml and can be accessed without logging in, exposing all user credentials (including admin). Public documents confirm the vulnerability and its impact on confidentiality, with exposure of credentials en...
CVE-2023-36136
PHPJabbers Class Scheduling System 1.0 lacks encryption on the password when editing a user account update user page allowing an attacker to capture all user names and passwords in clear text...
CVE-2023-33373
Connected IO v2.1.0 and prior keeps passwords and credentials in clear-text format, allowing attackers to exfiltrate the credentials and use them to impersonate the devices...
PT-2023-24322 · Unknown · Connected Io
Name of the Vulnerable Software and Affected Versions: Connected IO versions 2.1.0 and prior Description: The issue allows attackers to exfiltrate credentials and use them to impersonate devices, as passwords and credentials are kept in clear-text format. Recommendations: For Connected IO version...
CVE-2020-18406
An issue was discovered in cmseasy v7.0.0 that allows user credentials to be sent in clear text due to no encryption of form data...
PT-2023-11496 · Cmseasy · Cmseasy
Name of the Vulnerable Software and Affected Versions: cmseasy version 7.0.0 Description: An issue was discovered that allows user credentials to be sent in clear text due to no encryption of form data. Recommendations: For cmseasy version 7.0.0, consider implementing encryption for form data to...
Design/Logic Flaw
Credentials are printed in clear text in the IBM Spectrum Protect Plus 10.1.0.0 through 10.1.9.3 virgo log file in certain cases. Credentials could be the remote vSnap, offload targets, or VADP credentials depending on the operation performed. Credentials that are using API key or certificate are...
CVE-2021-36777
A Reliance on Untrusted Inputs in a Security Decision vulnerability in the login proxy of the openSUSE Build service allowed attackers to present users with a expected login form that then sends the clear text credentials to an attacker specified server. This issue affects: openSUSE Build service...
Security feature bypass
A Reliance on Untrusted Inputs in a Security Decision vulnerability in the login proxy of the openSUSE Build service allowed attackers to present users with a expected login form that then sends the clear text credentials to an attacker specified server. This issue affects: openSUSE Build service...
SUSE openSUSE 安全漏洞
openSUSE is a set of Linux-based free operating systems and open source community projects from SUSE Germany. openSUSE Build service login-proxy-scripts dc000cdfe9b9b715fb92195b1a57559362f689ef A security vulnerability exists in previous versions that allows an attacker to provide the user with t...
CVE-2021-38976
IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 stores user credentials in plain clear text which can be read by a local user. X-Force ID: 212781...
Security Bulletin: IBM MQ Java/JMS clients can inadvertently display cleartext credentials via diagnostic logs (CVE-2021-38949)
Summary An issue was idenitifed in IBM MQ Java and JMS clients where they could display clear text credentials in diagnostics log files automatically generated during system crashes. Vulnerability Details CVEID: CVE-2021-38949 DESCRIPTION: IBM MQ stores user credentials in plain clear text which...
Ricon Industrial Cellular Router S9922L 安全漏洞
Ricon Mobile Ricon Industrial Cellular Router S9922L is a mobile network router based on 4G/4.5G, WiFi and Vpn technology from Ricon Mobile Canada. It is used in intelligent transportation, Scada, Pos, industrial automation, telemetry, finance, environmental protection and many other fields. A...
Exchange/Outlook Autodiscover Bug Spills $100K+ Email Passwords
Guardicore security researcher Amit Serper has discovered a severe design bug in Microsoft Exchange’s autodiscover – a protocol that lets users easily configure applications such as Microsoft Outlook with just email addresses and passwords. The flaw has caused the Autodiscover service to leak...
CVE-2021-29904
IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbusGUI displays user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 207610...
Unspecified Vulnerability in ZOLL Defibrillator Dashboard (CNVD-2021-42143)
ZOLL Defibrillator Dashboard is an asset management tool from ZOLL USA. Provides at-a-glance readiness checks for the entire defibrillator fleet, even for defibrillators on multiple campuses and locations. A security vulnerability exists in ZOLL Defibrillator Dashboard that stems from the fact th...
ZOLL Defibrillator Dashboard 安全漏洞
ZOLL Defibrillator Dashboard is an asset management tool from ZOLL USA. Provides at-a-glance readiness checks for the entire defibrillator fleet, even for defibrillators on multiple campuses and locations. A security vulnerability exists in ZOLL Defibrillator Dashboard that stems from the fact th...