CVE-2021-38915

IBM Data Risk Manager 2.0.6 stores user credentials in plain clear text which can be read by an authenticated user. IBM X-Force ID: 209947...

Mozilla Firefox Access Control Error Vulnerability (CNVD-2021-90094)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the U.S. An access control error vulnerability exists in Mozilla Firefox. The vulnerability stems from the fact that plain text validation messages may be overwritten on another source through the use of the reportValidi...

Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities

Summary IBM Data Risk Manager has addressed the following vulnerabilities: Vulnerability Details CVEID: CVE-2021-20227 DESCRIPTION: SQLite is vulnerable to a denial of service, caused by a use-after-free flaw in the SELECT query function in src/select.c. By sending a specially-crafted request, a...

CVE-2021-38915

IBM Data Risk Manager 2.0.6 stores user credentials in plain clear text which can be read by an authenticated user. IBM X-Force ID: 209947...

Spoofing Attacks

Through use of reportValidity and window.open, a plain-text validation message could have been overlaid on another origin, leading to possible user confusion and spoofing attacks...

Security Bulletin: IBM Security Guardium Insights is affected by a security vulnerabilitiy (CVE-2020-4593)

Summary IBM Security Guardium Insights has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2020-4593 DESCRIPTION: IBM Security Guardium Insights stores user credentials in plain in clear text which can be read by a local user. CVSS Base score: 4.4 CVSS Temporal Score: See:...

CVE-2021-38497

Through use of reportValidity and window.open, a plain-text validation message could have been overlaid on another origin, leading to possible user confusion and spoofing attacks. This vulnerability affects Firefox 93, Thunderbird 91.2, and Firefox ESR 91.2...

Anonymous leaks more EPIK host data; ‘larger than previous leak’

By Waqas According to Anonymous, the EPIK data leak involves bootable disk images, API tokens, over 500,000 private keys, etc. all in plain-text format. This is a post from HackRead.com Read the original post: Anonymous leaks more EPIK host data; larger than previous leak...

PT-2021-7221

Name of the Vulnerable Software and Affected Versions MCE Systems affected versions not specified Description The issue is related to the transmission of data in plain text in the MCE Systems mobile device lifecycle management system's WebView component. This could allow an attacker to implement ...

CVE-2021-41300

ECOA BAS controller’s special page displays user account and passwords in plain text, thus unauthenticated attackers can access the page and obtain privilege with full functionality...

CVE-2021-41297

ECOA BAS controller is vulnerable to weak access control mechanism allowing authenticated user to remotely escalate privileges by disclosing credentials of administrative accounts in plain-text...

Improper access control

ECOA BAS controller is vulnerable to weak access control mechanism allowing authenticated user to remotely escalate privileges by disclosing credentials of administrative accounts in plain-text...

Privilege escalation

ECOA BAS controller’s special page displays user account and passwords in plain text, thus unauthenticated attackers can access the page and obtain privilege with full functionality...

CVE-2021-41300

CVE-2021-41300 concerns an information disclosure vulnerability in ECOA BAS controller. Multiple sources describe that the affected ECOA devices expose user credentials on a special web page, allowing unauthenticated remote access with full functionality. The Zero Science Lab report expands this ...

CVE-2021-41297 ECOA BAS controller - Insufficiently Protected Credentials-1

ECOA BAS controller is vulnerable to weak access control mechanism allowing authenticated user to remotely escalate privileges by disclosing credentials of administrative accounts in plain-text...

CVE-2021-41297

ECOA BAS controller is vulnerable to weak access control mechanism allowing authenticated user to remotely escalate privileges by disclosing credentials of administrative accounts in plain-text...

CVE-2021-41300

ECOA BAS controller’s special page displays user account and passwords in plain text, thus unauthenticated attackers can access the page and obtain privilege with full functionality...

CVE-2021-41297: Insufficiently Protected Credentials

ECOA BAS controller is vulnerable to weak access control mechanism allowing authenticated user to remotely escalate privileges by disclosing credentials of administrative accounts in plain-text...

PT-2021-23251

Name of the Vulnerable Software and Affected Versions ECOA BAS controller affected versions not specified Description The issue concerns a weak access control mechanism in the ECOA BAS controller, allowing an authenticated user to remotely escalate privileges. This is achieved by disclosing the...

CVE-2021-41300: Insufficiently Protected Credentials

ECOA BAS controller’s special page displays user account and passwords in plain text, thus unauthenticated attackers can access the page and obtain privilege with full functionality...