1668 matches found
CVE-2023-1904
In affected versions of Octopus Server it is possible for the OpenID client secret to be logged in clear text during the configuration of Octopus Server...
CVE-2023-1904
CVE-2023-1904 affects Octopus Server. The issue allows the OpenID client secret to be logged in clear text during server configuration. Public records in the provided documents confirm the vulnerability and its association with Octopus Server, but do not specify an official fix or affected versio...
Important: Red Hat Security Advisory: Red Hat Data Grid 8.4.6 security update
An update for Red Hat Data Grid 8 is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...
CVE-2023-5384
A flaw was found in Infinispan. When serializing the configuration for a cache to XML/JSON/YAML, which contains credentials JDBC store with connection pooling, remote store, the credentials are returned in clear text as part of the configuration. Mitigation The issue's impact is limited because...
Default credentials
On affected platforms running Arista MOS, the configuration of a BGP password will cause the password to be logged in clear text that can be revealed in local logs or remote logging servers by authenticated users, as well as appear in clear text in the device’s running config...
CVE-2023-24547
Summary: CVE-2023-24547 affects Arista MOS where a BGP password configured in plain text is logged in clear text in local and remote logs and in the running config. What’s affected: Arista MOS versions (MOS-0.13.0 onward per advisory) on affected platforms, notably Arista 7130 MOS and certain Met...
CVE-2023-24547 On Arista MOS configuration of a BGP password will cause the password to be logged in clear text.
On affected platforms running Arista MOS, the configuration of a BGP password will cause the password to be logged in clear text that can be revealed in local logs or remote logging servers by authenticated users, as well as appear in clear text in the device’s running config...
CVE-2023-24547 On Arista MOS configuration of a BGP password will cause the password to be logged in clear text.
On affected platforms running Arista MOS, the configuration of a BGP password will cause the password to be logged in clear text that can be revealed in local logs or remote logging servers by authenticated users, as well as appear in clear text in the device’s running config...
PT-2023-19684 · Arista · Arista Mos
Name of the Vulnerable Software and Affected Versions: Arista MOS affected versions not specified Description: The configuration of a BGP password on affected platforms running Arista MOS causes the password to be logged in clear text. This can be revealed in local logs or remote logging servers ...
Delta Electronics InfraSuite Device Master Security Vulnerability
Delta Electronics InfraSuite Device Master is a device for simplifying and automating critical device monitoring from Delta Electronics, Taiwan, China. A security vulnerability exists in Delta Electronics InfraSuite Device Master version v.1.0.7, which originated from a vulnerability that could...
LOYTEC electronics GmbH LINX Configurator Security Breach
LOYTEC electronics GmbH LINX Configurator is a tool from the Austrian company LOYTEC electronics GmbH for configuring and managing devices on its LINX platform. A security vulnerability exists in LOYTEC electronics GmbH LINX Configurator version 7.4.10 that stems from the use of clear text to...
BD FACSChorus Security Breach
BD FACSChorus is a multichannel flow cytometry system from BD Medical BD. A security vulnerability exists in BD FACSChorus, which arises from the software containing sensitive information stored in clear text...
Clear Text Credentials Exposure
Nautobot Device Onboarding is vulnerable to Clear Text Credentials Exposure. The vulnerability is due to credentials being visible via the Job Results view under the Additional Data tab as arguments for Celery Task execution when creating an OnboardingTask. As a result the attacker is exposed to...
GHSA-QF3C-RW9F-JH7V Clear Text Credentials Exposed via Onboarding Task
Impact When credentials are provided while creating an OnboardingTask they may be visible via the Job Results view under the Additional Data tab as args for the Celery Task execution. This only applies to OnboardingTasks that are created with credentials specified while on v2.0.0-2.0.2 of Nautobo...
CVE-2023-48700 Clear Text Credentials Exposed via Onboarding Task
The Nautobot Device Onboarding plugin uses the netmiko and NAPALM libraries to simplify the onboarding process of a new device into Nautobot down to, in many cases, an IP Address and a Location. Starting in version 2.0.0 and prior to version 3.0.0, credentials provided to onboarding task are...
LOYTEC LINX-212 Security Vulnerability
The LOYTEC LINX-212 is a building controller from LOYTEC. A security vulnerability exists in the LOYTEC LINX-212 6.2.4 firmware version that originates when a password change request is transmitted in clear text when sent on the web interface, resulting in information theft and account theft...
LOYTEC LINX-212 Security Vulnerability
LOYTEC LINX-212 is a building controller from LOYTEC. A security vulnerability exists in the LOYTEC LINX-212 6.2.4 firmware version. The vulnerability stems from the fact that the Web user interface requires login credentials for critical information data, debugging, configurations, etc., but the...
MOXA PT-G503 Security Vulnerability
MOXA PT-G503 is a series of Layer 2 managed switches from China's MOXA. A security vulnerability exists in MOXA PT-G503 v5.2 and earlier versions, which stems from not setting the security attribute of a sensitive cookie in an HTTPS session, which could result in the cookie being transmitted in...
SUSE CVE-2019-10195
A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way that FreeIPA's batch processing API logged operations. This included passing user passwords in clear text on FreeIPA masters. Batch processing of commands with...
