Design/Logic Flaw

lib/adminlib.php in Moodle through 2.3.11, 2.4.x before 2.4.8, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 logs cleartext passwords, which allows remote authenticated administrators to obtain sensitive information by reading the Config Changes Report...

CVE-2014-0008

lib/adminlib.php in Moodle through 2.3.11, 2.4.x before 2.4.8, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 logs cleartext passwords, which allows remote authenticated administrators to obtain sensitive information by reading the Config Changes Report...

CVE-2014-0008

CVE-2014-0008 affects Moodle versions up to 2.3.11 and 2.4.x before 2.4.8, 2.5.x before 2.5.4, and 2.6.x before 2.6.1. The issue is that lib/adminlib.php logs cleartext passwords, enabling remote authenticated administrators to obtain sensitive information by reading the Config Changes Report. Th...

CVE-2013-6687

The web portal in the Enterprise License Manager component in Cisco WebEx Meetings Server allows remote authenticated users to discover the cleartext administrative password by reading HTML source code, aka Bug ID CSCul33876...

Design/Logic Flaw

The web portal in the Enterprise License Manager component in Cisco WebEx Meetings Server allows remote authenticated users to discover the cleartext administrative password by reading HTML source code, aka Bug ID CSCul33876...

CVE-2013-6687

The Cisco WebEx Meetings Server Enterprise License Manager web portal contains a vulnerability where an authenticated, remote attacker can view the cleartext administrator password by reading the page source (Bug CSCul33876). Root cause: the password is included in the source code of the Enterpri...

CVE-2013-2819

The Sierra Wireless AirLink Raven X EV-DO gateway 42214.0.11.003 and 42284.0.11.003 allows remote attackers to install Trojan horse firmware by leveraging cleartext credentials in a crafted 1 update or 2 reprogramming action...

CVE-2013-2819

The Sierra Wireless AirLink Raven X EV-DO gateway (versions V4221_4.0.11.003 and V4228_4.0.11.003) is affected by CVE-2013-2819 due to missing encryption of the update/reprogramming process and use of plain text credentials, enabling remote firmware reprogramming and potential denial of service. ...

CVE-2013-2819

The Sierra Wireless AirLink Raven X EV-DO gateway 42214.0.11.003 and 42284.0.11.003 allows remote attackers to install Trojan horse firmware by leveraging cleartext credentials in a crafted 1 update or 2 reprogramming action...

PT-2014-4430 · Imapsync · Imapsync

Name of the Vulnerable Software and Affected Versions: imapsync versions prior to 1.584 Description: The issue allows remote attackers to obtain credentials by sniffing the network when a certificate verification failure occurs. This happens because imapsync attempts a cleartext login when runnin...

EMC Watch4net information leakage

Devices passwords are stored in cleartext...

EMC NetWorker information leakage

Cleartext password in audit reports...

CVE-2013-6181

EMC Watch4Net before 6.3 stores cleartext polled-device passwords in the installation repository, which allows local users to obtain sensitive information by leveraging repository privileges...

Design/Logic Flaw

EMC Watch4Net before 6.3 stores cleartext polled-device passwords in the installation repository, which allows local users to obtain sensitive information by leveraging repository privileges...

CVE-2013-6181

EMC Watch4Net is affected by CVE-2013-6181 in versions prior to 6.3. The vulnerability stems from storing device passwords in cleartext within the installation repository, allowing a local attacker with repository access to view sensitive credentials. The EMC security advisory confirms the remedi...

CVE-2013-6181

EMC Watch4Net before 6.3 stores cleartext polled-device passwords in the installation repository, which allows local users to obtain sensitive information by leveraging repository privileges...

CVE-2013-7005

D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-1000N with firmware before 1.08B77 stores account passwords in cleartext, which allows local users to obtain sensitive...

CVE-2013-7005

D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-1000N with firmware before 1.08B77 stores account passwords in cleartext, which allows local users to obtain sensitive...

CVE-2013-7005

CVE-2013-7005 affects D-Link DSR router series (DSR-150, DSR-150N, DSR-250/250N, DSR-500/500N, DSR-1000/1000N). Firmware versions before listed fixes store account passwords in cleartext in /tmp/teamf1.cfg.ascii, exposing them to local users who can read the Password fields. Affected firmware: DS...

CVE-2013-7128

Valve Bug Reporter in the valve-bugreporter package 2.10+bsos1 in Valve SteamOS Beta stores cleartext credentials in a .valve-bugreporter.cfg file upon a Remember Credentials action, which allows local users to obtain sensitive information by reading this file...