2906 matches found
CVE-2019-4697
Summary (grounded): CVE-2019-4697 affects IBM Guardium Data Encryption (GDE) 3.0.0.2, where user credentials are stored in plaintext and readable by an authenticated user. The vulnerability stems from plaintext storage in GDE 3.0.0.2, enabling credential disclosure. The IBM/IBM X-Force and CNVD/N...
CVE-2020-4593
IBM Security Guardium Insights 2.0.1 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 184747...
CVE-2020-4593
IBM Security Guardium Insights 2.0.1 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 184747...
Code injection
IBM Security Guardium Insights 2.0.1 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 184747...
Security Bulletin: Multiple Vulnerabilities in IBM Guardium Data Encryption (GDE)
Summary There are multiple vulnerabilities identified in IBM Guardium Data Encryption GDE .These vulnerabilities have been fixed in GDE 4.0.0.0. Please apply the latest version for the fixes. Vulnerability Details CVEID: CVE-2019-4713 DESCRIPTION: IBM Guardium Data Encryption GDE could allow a...
Fedora 32 : roundcubemail (2020-d0f8f20cfc)
RELEASE 1.4.8 - Security: Fix potential XSS issue in HTML editor of the identity signature input 7507 - Managesieve: Fix too-small input field in Elastic when using custom headers 7498 - Fix support for an error as a string in messagebeforesend hook 7475 - Elastic: Fix redundant scrollbar in plai...
Fedora 31 : roundcubemail (2020-b1e023936e)
RELEASE 1.4.8 - Security: Fix potential XSS issue in HTML editor of the identity signature input 7507 - Managesieve: Fix too-small input field in Elastic when using custom headers 7498 - Fix support for an error as a string in messagebeforesend hook 7475 - Elastic: Fix redundant scrollbar in plai...
Design/Logic Flaw
Unprotected Storage of Credentials vulnerability in McAfee Data Loss Prevention DLP for Mac prior to 11.5.2 allows local users to gain access to the RiskDB username and password via unprotected log files containing plain text credentials...
CVE-2020-7307
CVE-2020-7307 affects McAfee Data Loss Prevention (DLP) for Mac/V11.x in which credentials are stored in unprotected log files. The root cause is Unprotected Storage of Credentials allowing local users to access RiskDB credentials (username/password) prior to version 11.5.2. Public references in ...
CVE-2020-7306
The CVE-2020-7306 vulnerability affects McAfee Data Loss Prevention (DLP) for Mac prior to 11.5.2. It describes an Unprotected Storage of Credentials issue where ADRMS (and related) usernames and passwords can be read by local users from unprotected log files containing plaintext credentials. Exp...
CVE-2020-2232
Jenkins Email Extension Plugin 2.72 and 2.73 transmits and displays the SMTP password in plain text as part of the global Jenkins configuration form, potentially resulting in its exposure...
Default credentials
Jenkins Email Extension Plugin 2.72 and 2.73 transmits and displays the SMTP password in plain text as part of the global Jenkins configuration form, potentially resulting in its exposure...
CVE-2020-2232
Jenkins Email Extension Plugin 2.72 and 2.73 transmits and displays the SMTP password in plain text as part of the global Jenkins configuration form, potentially resulting in its exposure...
CVE-2020-2232
Summary of the vulnerability (CVE-2020-2232) : Jenkins Email Extension Plugin versions 2.72 and 2.73 transmit and display the SMTP password in plain text as part of the global Jenkins configuration form, potentially exposing the password. The password is stored in the file hudson.plugins.emailext...
Design/Logic Flaw
Passwords are stored in plain text within the configuration of SICK Package Analytics software up to and including V04.1.1. An authorized attacker could access these stored plaintext credentials and gain access to the ftp service. Storing a password in plaintext allows attackers to easily gain...
CVE-2020-2078
The CVE-2020-2078 entry concerns SICK Package Analytics (up to v04.1.1). The root cause is plaintext storage of passwords in the software configuration, allowing an attacker with authorized access to read credentials and gain access to the FTP service. Impact stated: potential exposure of passwor...
Security Bulletin: CVE-2019-4668 Pattern integration passwords stored in db without current encryption
Summary The password for pattern integrations is stored in the db without current encryption. Vulnerability Details CVEID: CVE-2019-4668 DESCRIPTION: IBM UrbanCode Deploy UCD stores user credentials in plain in clear text which can be read by a local user. CVSS Base score: 6.2 CVSS Temporal Score...
CVE-2020-4397
IBM Verify Gateway IVG 1.0.0 and 1.0.1 transmits sensitive information in plain text which could be obtained by an attacker using man in the middle techniques. IBM X-Force ID: 179428...