10 matches found
CVE-2026-8058 This Power System update is being released to address a sensitive information disclosure
IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows a user to supply a password with a resource dump request stores that password into the BMC audit log where an admin user can see it...
PGHoard: Password written to debug log
Impact When using .pgpass, database connection information including the username and password will be logged at the debug level. Patches Upgrade to version 2.7.1 or greater. Workarounds Filter out debug-level logs. References This issue was discovered by BugCrowd user DRAKOKORIAN...
PT-2024-33672 · Unknown · Pterodactyl
Name of the Vulnerable Software and Affected Versions: Pterodactyl versions prior to 1.11.8 Description: When a user disables two-factor authentication via the Panel, a DELETE request with their current password in a query parameter will be sent. While query parameters are encrypted when using TL...
CVE-2023-4065
A flaw was found in Red Hat AMQ Broker Operator, where it displayed a password defined in ActiveMQArtemisAddress CR, shown in plain text in the Operator Log. This flaw allows an authenticated local attacker to access information outside of their permissions...
CVE-2022-25829
Information Exposure vulnerability in Watch Active2 Plugin prior to version 2.2.08.22012751 allows attacker to access password information of connected WiFiAp in the log...
CVE-2022-25828
Information Exposure vulnerability in Watch Active Plugin prior to version 2.2.07.22012751 allows attacker to access password information of connected WiFiAp in the log...
SAMSUNG Watch Active Plugin 日志信息泄露漏洞
The SAMSUNG Galaxy Watch Plugin is a component of a Galaxy Wearable application from Samsung South Korea. A log information disclosure vulnerability exists in versions prior to SAMSUNG Watch Active Plugin 2.2.05.22012751, which allows an attacker to access password information for WiFiAp in logs...
SAMSUNG Watch Active2 Plugin 日志信息泄露漏洞
SAMSUNG Watch Active2 Plugin is a component of a Galaxy Wearable application from Samsung South Korea. A log information disclosure vulnerability exists in versions prior to SAMSUNG Watch Active2 Plugin 2.2.08.22012751, which allows an attacker to access password information for WiFiAp in logs...
PT-2022-17555 · Unknown · Watch Active2 Plugin
Name of the Vulnerable Software and Affected Versions: Watch Active2 Plugin versions prior to 2.2.08.22012751 Description: The issue allows an attacker to access password information of connected WiFi access points in the log. Recommendations: For versions prior to 2.2.08.22012751, update to...
