Lucene search
+L

2 matches found

Veracode
Veracode
added 2023/11/22 5:52 a.m.20 views

Clear Text Credentials Exposure

Nautobot Device Onboarding is vulnerable to Clear Text Credentials Exposure. The vulnerability is due to credentials being visible via the Job Results view under the Additional Data tab as arguments for Celery Task execution when creating an OnboardingTask. As a result the attacker is exposed to...

6.5CVSS6.7AI score0.00414EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2023/11/21 11:50 p.m.33 views

GHSA-QF3C-RW9F-JH7V Clear Text Credentials Exposed via Onboarding Task

Impact When credentials are provided while creating an OnboardingTask they may be visible via the Job Results view under the Additional Data tab as args for the Celery Task execution. This only applies to OnboardingTasks that are created with credentials specified while on v2.0.0-2.0.2 of Nautobo...

5.7CVSS6.5AI score0.00414EPSS
SaveExploits0References4
Rows per page
Query Builder