Code injection

IBM BigFix Inventory v9 9.2 stores user credentials in plain in clear text which can be read by a local user...

CVE-2016-0371

The Tivoli Storage Manager TSM password may be displayed in plain text via application trace output while application tracing is enabled...

CVE-2016-0371

The Tivoli Storage Manager TSM password may be displayed in plain text via application trace output while application tracing is enabled...

CVE-2016-8967

IBM BigFix Inventory v9 9.2 stores user credentials in plain in clear text which can be read by a local user...

CVE-2016-8967

IBM BigFix Inventory v9.2 (and IBM License Metric Tool v9) are affected by CVE-2016-8967, where user credentials are stored in clear text, enabling local read by an attacker with access to the system. The IBM Security Bulletin confirms the vulnerability and that a fix is tentatively planned for t...

CVE-2016-0371

The CVE-2016-0371 issue affects IBM Tivoli Storage Manager family where the password can be disclosed in plain text via application tracing output when tracing is enabled. IBM security bulletins list affected products/versions across several components: IBM Tivoli Storage Manager Client/API (and ...

CVE-2016-5950

IBM Kenexa LCMS Premier on Cloud stores user credentials in plain in clear text which can be read by an authenticated user...

Code injection

IBM Kenexa LCMS Premier on Cloud stores user credentials in plain in clear text which can be read by an authenticated user...

CVE-2016-5950

IBM Kenexa LCMS Premier on Cloud stores user credentials in plain in clear text which can be read by an authenticated user...

PT-2017-7615 · Ibm · Ibm Tivoli Storage Manager

Name of the Vulnerable Software and Affected Versions: Tivoli Storage Manager TSM affected versions not specified Description: The issue concerns the potential display of the Tivoli Storage Manager password in plain text through application trace output when application tracing is enabled...

CVE-2016-0371: Undefined Security Weakness

The Tivoli Storage Manager TSM password may be displayed in plain text via application trace output while application tracing is enabled...

CVE-2016-5950: Undefined Security Weakness

IBM Kenexa LCMS Premier on Cloud stores user credentials in plain in clear text which can be read by an authenticated user...

PT-2017-10304

Name of the Vulnerable Software and Affected Versions IBM Security Identity Manager Virtual Appliance affected versions not specified Description The issue concerns the storage of user credentials in plain text, which can be accessed by a local user. This poses a significant risk as it allows...

PT-2017-8828

Name of the Vulnerable Software and Affected Versions IBM Kenexa LCMS Premier on Cloud affected versions not specified Description The issue concerns the storage of user credentials in plain text, which can be accessed by an authenticated user. Recommendations At the moment, there is no informati...

PT-2017-9905

Name of the Vulnerable Software and Affected Versions IBM BigFix Inventory version 9.2 Description The issue concerns the storage of user credentials in plain text, which can be accessed by a local user. This allows unauthorized individuals to obtain sensitive information. Recommendations For IBM...

Padding Oracle Attack

OpenSSL is vulnerable to padding oracle attacks. The library does not check if there is enough data in both the MAC hash and padding bytes, allowing an attacker to recover the plain text by using the server as a padding oracle. Note: This vulnerability exists because of an incorrect fix for...

IBM Security Identity Manager Local Information Disclosure Vulnerability

IBM Security Privileged Identity Manager is an enterprise identity management security solution. The IBM Security Identity Manager Virtual Appliance stores user credentials in plain text, enabling local users to access sensitive information...

Paragon Initiative Enterprises: Using plain git protocol (vulnerable to MITM)

Using plain git protocol git://domain is insecure as the server is not verified MITM attacker can return different content if last commit not checked against known one more information about this issue Protocols to choose from when cloning: https://gist.github.com/grawity/4392747...

OpenJDK: exposure of server authentication credentials to proxy (Networking, 8160838)

A flaw was found in the way the Networking component of OpenJDK handled HTTP proxy authentication. A Java application could possibly expose HTTPS server authentication credentials via a plain text network connection to an HTTP proxy if proxy asked for authentication...

Sophos Web Appliance 4.2.1.3 Privilege Escalation

KL-001-2016-008 : Sophos Web Appliance Privilege Escalation Title: Sophos Web Appliance Privilege Escalation Advisory ID: KL-001-2016-008 Publication Date: 2016.11.03 Publication URL: https://www.korelogic.com/Resources/Advisories/KL-001-2016-008.txt 1. Vulnerability Details Affected Vendor: Soph...