1075 matches found
CVE-2020-1621
A local, authenticated user with shell can obtain the hashed values of login passwords via configd traces. This issue affects all versions of Junos OS Evolved prior to 19.3R1...
CVE-2020-1621
A local, authenticated user with shell can obtain the hashed values of login passwords via configd traces. This issue affects all versions of Junos OS Evolved prior to 19.3R1...
CVE-2020-1620
A local, authenticated user with shell can obtain the hashed values of login passwords via configd streamer log. This issue affects all versions of Junos OS Evolved prior to 19.3R1...
CVE-2020-1624
A local, authenticated user with shell can obtain the hashed values of login passwords and shared secrets via raw objmon configuration files. This issue affects all versions of Junos OS Evolved prior to 19.1R1...
Design/Logic Flaw
A local, authenticated user with shell can obtain the hashed values of login passwords via configd streamer log. This issue affects all versions of Junos OS Evolved prior to 19.3R1...
Design/Logic Flaw
A local, authenticated user with shell can obtain the hashed values of login passwords and shared secrets via raw objmon configuration files. This issue affects all versions of Junos OS Evolved prior to 19.1R1...
CVE-2020-1624 Junos OS Evolved: objmon logs may leak sensitive information
A local, authenticated user with shell can obtain the hashed values of login passwords and shared secrets via raw objmon configuration files. This issue affects all versions of Junos OS Evolved prior to 19.1R1...
CVE-2020-1622
Junos OS Evolved is affected. A local, authenticated user can access the EvoSharedObjStore and obtain hashed login passwords and shared secrets, leaking confidential data. Affected versions are all prior to 19.1R1; remediation is to upgrade to 19.1R1 or later. Exploitation status is not detailed ...
PT-2020-4134
Name of the Vulnerable Software and Affected Versions: Junos OS Evolved versions prior to 19.1R1 Description: The issue is related to insufficient protection of registration data in the objmon configuration file of the JunOS Evolved operating system. Exploitation of this issue may allow an attack...
PT-2020-4132
Name of the Vulnerable Software and Affected Versions: Junos OS Evolved versions prior to 19.1R1 Description: The issue is related to insufficient protection of registration data in the EvoSharedObjStore component of the Junos OS Evolved operating system. A local, authenticated user with shell...
PT-2020-4130
Name of the Vulnerable Software and Affected Versions: Junos OS Evolved versions prior to 19.3R1 Description: The issue is related to insufficient protection of registration data in the configd Streamer Log component of the JunOS Evolved operating system. Exploitation of this issue may allow an...
PT-2020-4131
Name of the Vulnerable Software and Affected Versions: Junos OS Evolved versions prior to 19.3R1 Description: The issue is related to insufficient protection of registration data in the configd Trace Handler component of the JunOS Evolved operating system. It allows a local, authenticated user wi...
Zoom Client Password Hash Disclosure Vulnerability (Apr 2020) - Windows
Zoom Client is leaking a user Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or...
Zoom Client for Meetings < 4.6.19253.0401 Multiple Vulnerabilities
The version of Zoom Client for Meetings installed on the remote Windows host is prior to 4.6.19253.0401. It is, therefore, affected by the following vulnerabilities: - A malicious party can use UNC links to leak a user's hashed password. - Users can access chat in a webinar when chat is disabled...
CVE-2018-13063
Easy!Appointments 1.3.0 has a Missing Authorization issue allowing retrieval of hashed passwords and salts...
CVE-2018-13063
Easy!Appointments 1.3.0 has a Missing Authorization issue allowing retrieval of hashed passwords and salts...
Authorization
Easy!Appointments 1.3.0 has a Missing Authorization issue allowing retrieval of hashed passwords and salts...
CVE-2018-13063
Easy!Appointments 1.3.0 has a Missing Authorization issue allowing retrieval of hashed passwords and salts...
CVE-2018-13063
Technical details about CVE-2018-13063 are not provided in the connected documents; only the basic description is present. Monitor for updates and additional disclosures to assess affected components, impact, and remediation.