Lucene search
+L

103 matches found

NVD
NVD
•added 2026/09/25 1:16 a.m.•12 views

CVE-2026-85417

Incomplete property masking in the SANnav logging subsystem permits SNMP authentication and privacy passwords to be recorded in application logs under specific configuration conditions. Individuals with read access to system logs or support bundles can retrieve these credentials, leading to...

6.4CVSS0.00191EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/25 12:03 a.m.•23 views

CVE-2026-85417

Brocade SANnav versions prior to 3.0.1a are vulnerable to incomplete property masking within the logging subsystem. Under specific configuration conditions, this flaw allows SNMP authentication and privacy passwords to be recorded in plain text within application logs. Attackers with read access ...

6.4CVSS5.8AI score0.00191EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/25 12:03 a.m.•8 views

CVE-2026-85417 Incomplete property masking in the SANnav logging subsystem

Incomplete property masking in the SANnav logging subsystem permits SNMP authentication and privacy passwords to be recorded in application logs under specific configuration conditions. Individuals with read access to system logs or support bundles can retrieve these credentials, leading to...

6.4CVSS5.8AI score0.00191EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/25 12:03 a.m.•29 views

CVE-2026-85417 Incomplete property masking in the SANnav logging subsystem

Incomplete property masking in the SANnav logging subsystem permits SNMP authentication and privacy passwords to be recorded in application logs under specific configuration conditions. Individuals with read access to system logs or support bundles can retrieve these credentials, leading to...

6.4CVSS0.00191EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/25 12:03 a.m.•12 views

EUVD-2026-86485

Incomplete property masking in the SANnav logging subsystem permits SNMP authentication and privacy passwords to be recorded in application logs under specific configuration conditions. Individuals with read access to system logs or support bundles can retrieve these credentials, leading to...

6.4CVSS5.8AI score0.00191EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/25 12:00 a.m.•6 views

CVE-2026-85417: Insertion of Sensitive Information into Log File

Incomplete property masking in the SANnav logging subsystem permits SNMP authentication and privacy passwords to be recorded in application logs under specific configuration conditions. Individuals with read access to system logs or support bundles can retrieve these credentials, leading to...

6.4CVSS5.9AI score0.00191EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/08/05 4:31 p.m.•39 views

CVE-2026-20289 Cisco RoomOS Logging Subsystem Information Disclosure Vulnerability

A vulnerability in the logging subsystem of Cisco RoomOS could allow an authenticated, local attacker with low privileges to access sensitive information. This vulnerability is due to the logging of sensitive information. An attacker could exploit this vulnerability by enabling a specific logging...

5.7CVSS0.00331EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/05 4:31 p.m.•21 views

EUVD-2026-53474

A vulnerability in the logging subsystem of Cisco RoomOS could allow an authenticated, local attacker with low privileges to access sensitive information. This vulnerability is due to the logging of sensitive information. An attacker could exploit this vulnerability by enabling a specific logging...

5.7CVSS5.8AI score0.00331EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/05 4:31 p.m.•27 views

CVE-2026-20289 Cisco RoomOS Logging Subsystem Information Disclosure Vulnerability

A vulnerability in the logging subsystem of Cisco RoomOS could allow an authenticated, local attacker with low privileges to access sensitive information. This vulnerability is due to the logging of sensitive information. An attacker could exploit this vulnerability by enabling a specific logging...

5.7CVSS5.8AI score0.00331EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/08/05 4:31 p.m.•14 views

CVE-2026-20289

A vulnerability in the logging subsystem of Cisco RoomOS could allow an authenticated, local attacker with low privileges to access sensitive information. This vulnerability is due to the logging of sensitive information. An attacker could exploit this vulnerability by enabling a specific logging...

5.7CVSS5.8AI score0.00331EPSS
SaveExploits0References2
CVE
CVE
•added 2026/08/05 4:31 p.m.•106 views

CVE-2026-20289

Cisco RoomOS contains a vulnerability in its logging subsystem where an authenticated, low-privilege local attacker can access sensitive information by enabling a specific logging level and collecting system logs. The issue arises from logging sensitive data, potentially exposing credentials. Rep...

6.5CVSS5.8AI score0.00331EPSS
SaveExploits0References1Affected Software2
Cisco
Cisco
•added 2026/08/05 4:00 p.m.•19 views

Cisco RoomOS Logging Subsystem Information Disclosure Vulnerability

A vulnerability in the logging subsystem of Cisco RoomOS could allow an authenticated, local attacker with low privileges to access sensitive information. This vulnerability is due to the logging of sensitive information. An attacker could exploit this vulnerability by enabling a specific logging...

5.7CVSS5.8AI score0.00331EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/05 12:00 a.m.•4 views

CVE-2026-20289: Insertion of Sensitive Information into Log File

A vulnerability in the logging subsystem of Cisco RoomOS could allow an authenticated, local attacker with low privileges to access sensitive information. This vulnerability is due to the logging of sensitive information. An attacker could exploit this vulnerability by enabling a specific logging...

6.5CVSS5.8AI score0.00331EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/04/30 7:47 p.m.•22 views

EUVD-2026-26416

CVE-2026-33448 is a format string vulnerability in the logging subsystem of Secure Access client for MacOS prior to 14.50. Attackers with control of a modified server can force the client to dump the contents of a small portion of memory to the log files potentially revealing secrets...

4.8CVSS5.3AI score0.00143EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/30 12:00 a.m.•27 views

PT-2026-36170

Name of the Vulnerable Software and Affected Versions Secure Access client for MacOS versions prior to 14.50 Description A format string issue exists in the logging subsystem. Attackers controlling a modified server can force the client to dump small portions of memory into log files, which may...

4.8CVSS5.8AI score0.00143EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/30 12:00 a.m.•4 views

CVE-2026-33448: Exposure of Sensitive Information to an Unauthorized Actor

CVE-2026-33448 is a format string vulnerability in the logging subsystem of Secure Access client for MacOS prior to 14.50. Attackers with control of a modified server can force the client to dump the contents of a small portion of memory to the log files potentially revealing secrets...

4.8CVSS5.8AI score0.00143EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/04/30 12:00 a.m.•21 views

Absolute Secure Access 信息泄露漏洞

Absolute Secure Access is an application developed by Absolute Corporation. It provides secure service edge SSE services optimized for mixed and mobile work environments. Versions of Absolute Secure Access prior to 14.50 contained a vulnerability related to information leakage, caused by a format...

4.8CVSS5.8AI score0.00143EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/17 2:15 a.m.•20 views

CVE-2026-0519

In Secure Access 12.70 and prior to 14.20, the logging subsystem may write an unredacted authentication token to logs under certain configurations. Any party with access to those logs could read the token and reuse it to access an integrated system...

4.6CVSS0.00137EPSS
SaveExploits0References1
OSV
OSV
•added 2026/01/17 2:15 a.m.•16 views

CVE-2026-0519

In Secure Access 12.70 and prior to 14.20, the logging subsystem may write an unredacted authentication token to logs under certain configurations. Any party with access to those logs could read the token and reuse it to access an integrated system...

3.4CVSS5.8AI score0.00137EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/17 1:13 a.m.•52 views

CVE-2026-0519

CVE-2026-0519 : In Secure Access 12.70 and earlier than 14.20, the logging subsystem may write an unredacted authentication token to logs under certain configurations. This could allow any party with access to those logs to read the token and reuse it to access an integrated system. The provided ...

4.6CVSS6.6AI score0.00137EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder