Lucene search
+L

18 matches found

BDU FSTEC
BDU FSTEC
•added 2026/06/17 12:00 a.m.•11 views

The vulnerability of the cli_history parameter in the command-line tool for interacting with Amazon Web Services AWS CLI allows a attacker to trigger a service failure.

The vulnerability of the clihistory parameter in the AWS CLI command line tool, which is used to interact with Amazon Web Services, is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.9CVSS5.8AI score
SaveExploits0References2Affected Software2
Snyk
Snyk
•added 2026/02/27 3:50 p.m.•11 views

Incorrect Default Permissions

Overview Affected versions of this package are vulnerable to Incorrect Default Permissions in the clihistory feature. An attacker can access sensitive command history and API request/response data by reading the history database file if it is created with default permissions on a multi-user Unix...

4.9CVSS6AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/02/27 12:00 a.m.•2 views

PT-2026-50579

Уязвимость параметра cli history инструмента командной строки для взаимодействия с сервисами Amazon Web Services AWS CLI связана с использованием имени с неправильной ссылкой. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

4.6CVSS5.8AI score
SaveExploits0References3
OSV
OSV
•added 2025/07/17 10:15 p.m.•20 views

CVE-2025-7397

A vulnerability in the ascgshell, of Brocade ASCG before 3.3.0 stores any command executed in the Command Line Interface CLI in plain text within the command history. A local authenticated user that can access sensitive information like passwords within the CLI history leading to unauthorized...

7.1CVSS5.8AI score0.001EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/07/17 9:53 p.m.•41 views

CVE-2025-7397 CLI history displays inline passwords

A vulnerability in the ascgshell, of Brocade ASCG before 3.3.0 stores any command executed in the Command Line Interface CLI in plain text within the command history. A local authenticated user that can access sensitive information like passwords within the CLI history leading to unauthorized...

6.8CVSS0.001EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/07/17 9:53 p.m.•15 views

CVE-2025-7397 CLI history displays inline passwords

A vulnerability in the ascgshell, of Brocade ASCG before 3.3.0 stores any command executed in the Command Line Interface CLI in plain text within the command history. A local authenticated user that can access sensitive information like passwords within the CLI history leading to unauthorized...

6.8CVSS6.7AI score0.001EPSS
SaveExploits0References1
CVE
CVE
•added 2025/07/17 9:53 p.m.•44 views

CVE-2025-7397

The CVE-2025-7397 issue affects Brocade ASCG’s ascgshell prior to version 3.3.0, where commands entered in the CLI history are stored in plain text. This creates a local, authenticated attacker’s risk of exposing passwords or sensitive data via history inspection, leading to unauthorized access a...

7.1CVSS6.2AI score0.001EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/17 12:00 a.m.•5 views

CVE-2025-7397: Cleartext Storage of Sensitive Information

A vulnerability in the ascgshell, of Brocade ASCG before 3.3.0 stores any command executed in the Command Line Interface CLI in plain text within the command history. A local authenticated user that can access sensitive information like passwords within the CLI history leading to unauthorized...

7.1CVSS5.8AI score0.001EPSS
SaveExploits0References1
Broadcom
Broadcom
•added 2025/07/15 12:00 a.m.•34 views

CLI history displays inline passwords

A vulnerability in the ascgshell, of Brocade ASCG before 3.3.0 stores any command executed in the Command Line Interface CLI in plain text within the command history. A local authenticated user that can access sensitive information like passwords within the CLI history leading to unauthorized...

7.1CVSS6.6AI score0.001EPSS
SaveExploits0
OSV
OSV
•added 2016/08/31 5:34 p.m.•17 views

MGASA-2016-0295 Updated redis packages fix security vulnerability

It was discovered that redis did not properly protect redis-cli history files; they were created by default with world-readable permissions CVE-2013-7458...

3.3CVSS4.2AI score0.00484EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2015/05/14 3:14 p.m.•17 views

CLI: Insecure default permissions on history file

It was found that the Command Line Interface, as provided by Red Hat Enterprise Application Platform, created a history file named .jboss-cli-history in the user's home directory with insecure default file permissions. This could allow a malicious local user to gain information otherwise not...

2.1CVSS7.1AI score0.00372EPSS
SaveExploits0References4
NVD
NVD
•added 2015/04/21 5:59 p.m.•33 views

CVE-2014-3586

The default configuration for the Command Line Interface in Red Hat Enterprise Application Platform before 6.4.0 and WildFly formerly JBoss Application Server uses weak permissions for .jboss-cli-history, which allows local users to obtain sensitive information via unspecified vectors...

2.1CVSS5.4AI score0.00372EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2015/04/21 12:00 a.m.•3 views

PT-2015-3726

Name of the Vulnerable Software and Affected Versions Red Hat Enterprise Application Platform versions prior to 6.4.0 WildFly formerly JBoss Application Server affected versions not specified Description The issue concerns the default configuration for the Command Line Interface in the affected...

2.1CVSS0.00372EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/04/21 12:00 a.m.•14 views

CVE-2014-3586: Undefined Security Weakness

The default configuration for the Command Line Interface in Red Hat Enterprise Application Platform before 6.4.0 and WildFly formerly JBoss Application Server uses weak permissions for .jboss-cli-history, which allows local users to obtain sensitive information via unspecified vectors...

2.1CVSS7.2AI score0.00372EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2015/04/16 4:26 p.m.•15 views

CLI: Insecure default permissions on history file

It was found that the Command Line Interface, as provided by Red Hat Enterprise Application Platform, created a history file named .jboss-cli-history in the user's home directory with insecure default file permissions. This could allow a malicious local user to gain information otherwise not...

2.1CVSS7.1AI score0.00372EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2015/04/16 4:17 p.m.•16 views

CLI: Insecure default permissions on history file

It was found that the Command Line Interface, as provided by Red Hat Enterprise Application Platform, created a history file named .jboss-cli-history in the user's home directory with insecure default file permissions. This could allow a malicious local user to gain information otherwise not...

2.1CVSS7.1AI score0.00372EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2015/04/16 4:13 p.m.•21 views

CLI: Insecure default permissions on history file

It was found that the Command Line Interface, as provided by Red Hat Enterprise Application Platform, created a history file named .jboss-cli-history in the user's home directory with insecure default file permissions. This could allow a malicious local user to gain information otherwise not...

2.1CVSS7.1AI score0.00372EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2015/04/16 3:39 p.m.•18 views

CLI: Insecure default permissions on history file

It was found that the Command Line Interface, as provided by Red Hat Enterprise Application Platform, created a history file named .jboss-cli-history in the user's home directory with insecure default file permissions. This could allow a malicious local user to gain information otherwise not...

2.1CVSS7.1AI score0.00372EPSS
SaveExploits0References4
Rows per page
Query Builder