Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the unauthenticated GET /api/v1/oauth and GET /api/v1/oauth/:id endpoints, which serialize and return sensitive fields such as clientsecret in the response. An attacker can obtain...

The vulnerability of the retryablehttp package, related to the insertion of confidential information into the log file, allows a perpetrator to obtain confidential authentication credentials for HTTP basic authentication.

The vulnerability of the retryablehttp package lies in the lack of cleaning of URL addresses when they are written to the log file. Exploiting this vulnerability can allow an attacker to obtain confidential basic authentication credentials...

CVE-2018-17148

An Insufficient Access Control vulnerability leading to credential disclosure in coreconfigsnapshot.php aka configuration snapshot page in Nagios XI before 5.5.4 allows remote attackers to gain access to configuration files containing confidential credentials...

CVE-2018-17148

An Insufficient Access Control vulnerability leading to credential disclosure in coreconfigsnapshot.php aka configuration snapshot page in Nagios XI before 5.5.4 allows remote attackers to gain access to configuration files containing confidential credentials...