9015 matches found
Design/Logic Flaw
Cleartext transmission of sensitive information. The following products are affected: Acronis Cyber Protect 15 Linux, Windows before build 29240...
CVE-2022-30993 Cleartext transmission of sensitive information
Cleartext transmission of sensitive information. The following products are affected: Acronis Cyber Protect 15 Linux, Windows before build 29240...
CVE-2022-30993
CVE-2022-30993 affects Acronis Cyber Protect 15 (Linux, Windows) before build 29240. The issue is a cleartext transmission of sensitive information. Root cause: data in transit is not encrypted as described in sources; impact includes potential exposure of sensitive data (confidentiality). The CV...
CVE-2022-30994
CVE-2022-30994 concerns plaintext transmission of sensitive information in Acronis Cyber Protect 15 (Windows) before build 29240. The available sources explicitly note a cleartext exposure over the network, affecting that product/version. The connected documents do not provide exploit details or ...
CVE-2022-30994 Cleartext transmission of sensitive information
Cleartext transmission of sensitive information. The following products are affected: Acronis Cyber Protect 15 Windows before build 29240...
CVE-2022-30994
Cleartext transmission of sensitive information. The following products are affected: Acronis Cyber Protect 15 Windows before build 29240...
CVE-2022-30993
Cleartext transmission of sensitive information. The following products are affected: Acronis Cyber Protect 15 Linux, Windows before build 29240...
TIETEN Acronis Cyber Protect 安全漏洞
Acronis Cyber Protect is an application. Provides unified protection for your network by integrating backup, disaster recovery, artificial intelligence-based malware protection, remote assistance and security into a single, reliable tool.Acronis Cyber Protect 15 Linux, Windows is vulnerable to a...
Cleartext Storage of Sensitive Information
Overview org.jenkins-ci.plugins:sonar is a SonarQube scanner plugin for Jenkins Affected versions of this package are vulnerable to Cleartext Storage of Sensitive Information via the sonar.sonarPassword parameter. An attacker can obtain sensitive information, including cleartext passwords, by...
GHSA-3X9H-3P7M-33M7 Jenkins SonarQube Plugin Stores Passwords in Cleartext
The Jenkins Plugin for SonarQube 3.7 and earlier allows remote authenticated users to obtain sensitive information cleartext passwords by reading the value in the sonar.sonarPassword parameter from jenkins/configure...
Jenkins SonarQube Plugin Stores Passwords in Cleartext
The Jenkins Plugin for SonarQube 3.7 and earlier allows remote authenticated users to obtain sensitive information cleartext passwords by reading the value in the sonar.sonarPassword parameter from jenkins/configure...
jwcrypto lacks the Random Filling protection mechanism
The Rsa15 class in the RSA 1.5 algorithm implementation in jwa.py in jwcrypto before 0.3.2 lacks the Random Filling protection mechanism, which makes it easier for remote attackers to obtain cleartext data via a Million Message Attack MMA...
CVE-2022-29588
Konica Minolta bizhub MFP devices before 2022-04-14 use cleartext password storage for the /var/log/nginx/html/ADMINPASS and /etc/shadow files...
CVE-2022-29588
Konica Minolta bizhub MFP devices before 2022-04-14 use cleartext password storage for the /var/log/nginx/html/ADMINPASS and /etc/shadow files...
CVE-2022-29588
Konica Minolta bizhub MFP devices before 2022-04-14 use cleartext password storage for the /var/log/nginx/html/ADMINPASS and /etc/shadow files...
Design/Logic Flaw
Konica Minolta bizhub MFP devices before 2022-04-14 use cleartext password storage for the /var/log/nginx/html/ADMINPASS and /etc/shadow files...
CVE-2022-29588
CVE-2022-29588 affects Konica Minolta bizhub MFP devices before 2022-04-14, where credentials are stored in cleartext in /var/log/nginx/html/ADMINPASS and /etc/shadow. The root cause is cleartext password storage on the device, leading to potential password disclosure and confidentiality impact. ...
CVE-2022-29588
Konica Minolta bizhub MFP devices before 2022-04-14 use cleartext password storage for the /var/log/nginx/html/ADMINPASS and /etc/shadow files...
HashiCorp Consul can use cleartext agent-to-agent RPC communication
HashiCorp Consul 0.5.1 through 1.4.0 can use cleartext agent-to-agent RPC communication because the verifyoutgoing setting is improperly documented. NOTE: the vendor has provided reconfiguration steps that do not require a software upgrade...
GHSA-4QVX-QQ5W-695P HashiCorp Consul can use cleartext agent-to-agent RPC communication
HashiCorp Consul 0.5.1 through 1.4.0 can use cleartext agent-to-agent RPC communication because the verifyoutgoing setting is improperly documented. NOTE: the vendor has provided reconfiguration steps that do not require a software upgrade...