CVE-2024-0865

CWE-798: Use of hard-coded credentials vulnerability exists that could cause local privilege escalation when logged in as a non-administrative user...

CVE-2024-0865

CVE-2024-0865 affects Schneider Electric EcoStruxure IT Gateway (installer). Root cause: hard-coded credentials in the installer enable local privilege escalation for users with low privileges; attacker must already execute code locally. Exploitation details are described in ZDI reports (local es...

CVE-2024-0865

CWE-798: Use of hard-coded credentials vulnerability exists that could cause local privilege escalation when logged in as a non-administrative user...

Apache Submarine Commons Utils has a hard-coded secret

Improper Authentication vulnerability in Apache Submarine Commons Utils. This issue affects Apache Submarine Commons Utils: from 0.8.0. As this project is retired, we do not plan to release a version that fixes this issue. If the user doesn't explicitly set submarine.auth.default.secret, a defaul...

GHSA-JWCG-WV5X-VG3G Apache Submarine Commons Utils has a hard-coded secret

Improper Authentication vulnerability in Apache Submarine Commons Utils. This issue affects Apache Submarine Commons Utils: from 0.8.0. As this project is retired, we do not plan to release a version that fixes this issue. If the user doesn't explicitly set submarine.auth.default.secret, a defaul...

PT-2024-37099 · Logsign · Logsign Unified Secops Platform

Name of the Vulnerable Software and Affected Versions: Logsign Unified SecOps Platform affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations. The flaw exists within the HTTP API and results from using a...

CVE-2024-29855

Hard-coded JWT secret allows authentication bypass in Veeam Recovery Orchestrator...

CVE-2024-29855

Hard-coded JWT secret allows authentication bypass in Veeam Recovery Orchestrator...

CVE-2024-29855

Hard-coded JWT secret allows authentication bypass in Veeam Recovery Orchestrator...

CVE-2024-29855

CVE-2024-29855 affects Veeam Recovery Orchestrator (VRO) Web Console. The root cause is a hard-coded JWT secret that enables authentication bypass, allowing an attacker to gain administrative access to the VRO web UI. Affected releases include VRO versions prior to the patched builds. According t...

CVE-2024-29855

Hard-coded JWT secret allows authentication bypass in Veeam Recovery Orchestrator...

Veeam Recovery Orchestrator Security Breach

Veeam Recovery Orchestrator is a Veeam company that provides comprehensive reporting, automated testing, and at-a-glance compliance dashboards. A security vulnerability exists in Veeam Recovery Orchestrator version 7.0 that stems from a Hard-coded JWT key that can bypass authentication...

CVE-2024-3699

Use of hard-coded password to the patients' database allows an attacker to retrieve sensitive data stored in the database. The password is the same among all drEryk Gabinet installations.This issue affects drEryk Gabinet software versions from 7.0.0.0 through 9.17.0.0...

CVE-2024-3699

Use of hard-coded password to the patients' database allows an attacker to retrieve sensitive data stored in the database. The password is the same among all drEryk Gabinet installations.This issue affects drEryk Gabinet software versions from 7.0.0.0 through 9.17.0.0...

CVE-2024-1228

Use of hard-coded password to the patients' database allows an attacker to retrieve sensitive data stored in the database. The password is the same among all Eurosoft Przychodnia installations. This issue affects Eurosoft Przychodnia software before version 20240417.001 from that version...

CVE-2024-1228

Use of hard-coded password to the patients' database allows an attacker to retrieve sensitive data stored in the database. The password is the same among all Eurosoft Przychodnia installations. This issue affects Eurosoft Przychodnia software before version 20240417.001 from that version...

CVE-2024-3700

CVE-2024-3700 involves the use of a hard-coded password for the patients’ database in Estomed Sp. z o.o. Simple Care software. The password is the same across all installations and affects all versions of Simple Care; the product is no longer supported. The NVD entry lists a CRITICAL impact with ...

CVE-2024-3699

CVE-2024-3699 describes a hard-coded database password used across all drEryk Gabinet installations, allowing retrieval of sensitive patient data. Affected software: drEryk Gabinet versions 7.0.0.0 through 9.17.0.0. According to the available metrics, the vulnerability has a CRITICAL impact (C/H/...

CVE-2024-1228 Hardcoded password in Eurosoft Przychodnia

Use of hard-coded password to the patients' database allows an attacker to retrieve sensitive data stored in the database. The password is the same among all Eurosoft Przychodnia installations. This issue affects Eurosoft Przychodnia software before version 20240417.001 from that version...

CVE-2024-1228

CVE-2024-1228 involves a hard-coded password to the patients’ database in Eurosoft Przychodnia software. Connected Red Hat and related records confirm the vulnerability affects Eurosoft Przychodnia installations prior to version 20240417.001, where it is fixed in that release. The credential weak...