CVE-2011-1433

The 1 AgentInterface and 2 CustomerInterface components in Open Ticket Request System OTRS before 3.0.6 place cleartext credentials into the session data in the database, which makes it easier for context-dependent attackers to obtain sensitive information by reading the UserLogin and UserPW fiel...

DEBIAN-CVE-2011-1433

The 1 AgentInterface and 2 CustomerInterface components in Open Ticket Request System OTRS before 3.0.6 place cleartext credentials into the session data in the database, which makes it easier for context-dependent attackers to obtain sensitive information by reading the UserLogin and UserPW fiel...

Design/Logic Flaw

The 1 AgentInterface and 2 CustomerInterface components in Open Ticket Request System OTRS before 3.0.6 place cleartext credentials into the session data in the database, which makes it easier for context-dependent attackers to obtain sensitive information by reading the UserLogin and UserPW fiel...

CVE-2011-1433

CVE-2011-1433 affects Open Ticket Request System (OTRS) prior to 3.0.6, where both the AgentInterface and CustomerInterface store cleartext credentials in the session data within the database, enabling context-dependent attackers to read _UserLogin and _UserPW fields. The vulnerability is an info...

CVE-2011-1433

The 1 AgentInterface and 2 CustomerInterface components in Open Ticket Request System OTRS before 3.0.6 place cleartext credentials into the session data in the database, which makes it easier for context-dependent attackers to obtain sensitive information by reading the UserLogin and UserPW fiel...

CVE-2011-1433

Removed by vendor...

CVE-2011-0410

CollabNet ScrumWorks Basic 1.8.4 uses cleartext credentials for network communication and the internal database, which makes it easier for context-dependent attackers to obtain sensitive information by 1 sniffing the network for transmissions of Java objects or 2 reading the database...

Design/Logic Flaw

CollabNet ScrumWorks Basic 1.8.4 uses cleartext credentials for network communication and the internal database, which makes it easier for context-dependent attackers to obtain sensitive information by 1 sniffing the network for transmissions of Java objects or 2 reading the database...

CVE-2011-0410

CollabNet ScrumWorks Basic 1.8.4 uses cleartext credentials for network communication and the internal database, which makes it easier for context-dependent attackers to obtain sensitive information by 1 sniffing the network for transmissions of Java objects or 2 reading the database...

CVE-2009-2201

The screensharing feature in the Admin application in Apple Xsan before 2.2 places a cleartext username and password in a URL within an error dialog, which allows physically proximate attackers to obtain credentials by reading this dialog...

Design/Logic Flaw

The screensharing feature in the Admin application in Apple Xsan before 2.2 places a cleartext username and password in a URL within an error dialog, which allows physically proximate attackers to obtain credentials by reading this dialog...

Design/Logic Flaw

The Huawei D100 stores the administrator's account name and password in cleartext in a cookie, which allows context-dependent attackers to obtain sensitive information by 1 reading a cookie file, by 2 sniffing the network for HTTP headers, and possibly by using unspecified other vectors...

PT-2009-4708 · Huawei · Huawei D100

Name of the Vulnerable Software and Affected Versions: Huawei D100 affected versions not specified Description: The issue allows context-dependent attackers to obtain sensitive information, specifically the administrator's account name and password, which are stored in cleartext in a cookie...

Code injection

The IP Phone Personal Address Book PAB Synchronizer feature in Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.1, 4.2 before 4.23SR4b, 4.3 before 4.32SR1b, 5.x before 5.13e, 6.x before 6.13, and 7.0 before 7.02 sends privileged directory-service account credentials to the...

CVE-2009-0632

CVE-2009-0632 affects Cisco Unified Communications Manager (CUCM) IP Phone Personal Address Book (PAB) Synchronizer. The vulnerability leaks privileged directory-service credentials to the client during PAB sync, allowing an attacker who intercepts credentials to modify CUCM configuration and esc...

Design/Logic Flaw

The web management interface in Citrix NetScaler 8.0 build 47.8 uses weak encryption XOR of unpadded data to store credentials within a cookie, which makes it easier for remote attackers to obtain cleartext credentials when a cookie is captured via a known-plaintext attack...

CVE-2007-6192

The web management interface in Citrix NetScaler 8.0 build 47.8 uses weak encryption XOR of unpadded data to store credentials within a cookie, which makes it easier for remote attackers to obtain cleartext credentials when a cookie is captured via a known-plaintext attack...

PT-2007-6745 · Retina X Studios · Mobile Spy

Name of the Vulnerable Software and Affected Versions: Mobile Spy affected versions not specified Description: The issue concerns the storage and transmission of sensitive information. Specifically, it involves storing login credentials in cleartext under a specific registry key and sending login...

Web Server Transmits Cleartext Credentials

The remote web server contains several HTML form fields containing an input of type 'password' which transmit their information to a remote web server in cleartext. An attacker eavesdropping the traffic between web browser and server may obtain logins and passwords of valid users. C Tenable Netwo...

PT-2005-2795 · D Link · D-Link Dsl-504T

Name of the Vulnerable Software and Affected Versions: D-Link DSL-504T affected versions not specified Description: The issue allows remote attackers to obtain sensitive information because usernames and passwords are stored in cleartext in the router configuration file. Recommendations: At the...