CVE-2019-14825

A cleartext password storage issue was discovered in Katello, versions 3.x.x.x before katello 3.12.0.9. Registry credentials used during container image discovery were inadvertently logged without being masked. This flaw could expose the registry credentials to other privileged users...

CVE-2019-14825

A cleartext password storage issue was discovered in Katello, versions 3.x.x.x before katello 3.12.0.9. Registry credentials used during container image discovery were inadvertently logged without being masked. This flaw could expose the registry credentials to other privileged users...

Default credentials

A cleartext password storage issue was discovered in Katello, versions 3.x.x.x before katello 3.12.0.9. Registry credentials used during container image discovery were inadvertently logged without being masked. This flaw could expose the registry credentials to other privileged users...

CVE-2019-14825

Katello grip: A cleartext password storage issue in Katello (prior to 3.12.0.9; later updated to 3.12.0.9+ per sources) causes registry credentials used during container image discovery to be logged in plaintext, exposing them to other privileged users. Connected advisories corroborate that regis...

CVE-2019-14825

A cleartext password storage issue was discovered in Katello, versions 3.x.x.x before katello 3.12.0.9. Registry credentials used during container image discovery were inadvertently logged without being masked. This flaw could expose the registry credentials to other privileged users...

PT-2019-13852 · Red Hat · Katello

Name of the Vulnerable Software and Affected Versions: Katello versions prior to 3.12.0.9 Description: A cleartext password storage issue was discovered in Katello. Registry credentials used during container image discovery were inadvertently logged without being masked. This flaw could expose th...

CVE-2013-3313

The Loftek Nexus 543 IP Camera stores passwords in cleartext, which allows remote attackers to obtain sensitive information via an HTTP GET request to checkusers.cgi. NOTE: cleartext passwords can also be obtained from proc/kcore when leveraging the directory traversal vulnerability in...

Directory traversal

The Loftek Nexus 543 IP Camera stores passwords in cleartext, which allows remote attackers to obtain sensitive information via an HTTP GET request to checkusers.cgi. NOTE: cleartext passwords can also be obtained from proc/kcore when leveraging the directory traversal vulnerability in...

CVE-2013-3313

Affected product: Loftek Nexus 543 IP Camera. Vulnerability details: CVE-2013-3313 exposes passwords in cleartext via an HTTP GET to check_users.cgi. The entry references related access via a directory traversal flaw in CVE-2013-3311, which can be leveraged to read sensitive data from the device ...

CVE-2013-3313

The Loftek Nexus 543 IP Camera stores passwords in cleartext, which allows remote attackers to obtain sensitive information via an HTTP GET request to checkusers.cgi. NOTE: cleartext passwords can also be obtained from proc/kcore when leveraging the directory traversal vulnerability in...

DEBIAN-CVE-2012-1257

Pidgin 2.10.0 uses DBUS for certain cleartext communication, which allows local users to obtain sensitive information via a dbus session monitor...

CVE-2012-1257

Pidgin 2.10.0 uses DBUS for certain cleartext communication, which allows local users to obtain sensitive information via a dbus session monitor...

UBUNTU-CVE-2012-1257

Pidgin 2.10.0 uses DBUS for certain cleartext communication, which allows local users to obtain sensitive information via a dbus session monitor...

Information disclosure

Pidgin 2.10.0 uses DBUS for certain cleartext communication, which allows local users to obtain sensitive information via a dbus session monitor...

CVE-2012-1257

Pidgin 2.10.0 uses DBUS for certain cleartext communication, which allows local users to obtain sensitive information via a dbus session monitor...

CVE-2012-1257

CVE-2012-1257 affects Pidgin 2.10.0. The vulnerability arises because Pidgin uses DBUS for certain cleartext communication, allowing local users to obtain sensitive information via a dbus session monitor. This is a local-access issue with partial confidentiality impact per the CVE description; no...

CVE-2012-1257

Pidgin 2.10.0 uses DBUS for certain cleartext communication, which allows local users to obtain sensitive information via a dbus session monitor...

The vulnerability of the FTP protocol implementation in microprogramming systems for programmable logic controllers of the Modicon M340, Modicon Quantum, and Modicon Premium series allows a hacker to gain access to user credentials.

The vulnerability of the FTP protocol implementation in microprogramming systems for programmable logic controllers of the Modicon M340, Modicon Quantum, and Modicon Premium series lies in the storage of user credentials in an open manner. Exploiting this vulnerability allows a malicious actor to...

SQL Injection Vulnerability in 162100 Simple Forum System of Shenyang Huanggu District Ainong Network Technology Service Center (CNVD-2020-00002)

Huanggu District, Shenyang City, love thick network technology service center simple forum system is a forum website building system. Shenyang Huanggu District, Shenyang City, love thick network technology service center 162100 simple forum system there are SQL injection vulnerabilities, attacker...

EulerOS 2.0 SP5 : 389-ds-base (EulerOS-SA-2019-2127)

According to the version of the 389-ds-base packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - 389-ds-base before versions 1.3.8.5, 1.4.0.12 is vulnerable to a Cleartext Storage of Sensitive Information. By default, when the Replica and/...