CVE-2024-25052 IBM Jazz Reporting Service information disclosure

IBM Jazz Reporting Service 7.0.3 stores user credentials in plain clear text which can be read by an admin user. IBM X-Force ID: 283363...

Anonshop Security Breach

Anonshop is an online shopping system from Anon shop open source. A security vulnerability exists in Anonshop that stems from allowing credentials to be stored in plain text...

IBM Jazz Reporting Service Security Vulnerability

IBM Jazz Reporting Service JRS is a suite of ready-to-use reporting components from International Business Machines IBM. The product includes features such as report generation, data collection, and lifecycle queries. A security vulnerability exists in IBM Jazz Reporting Service version 7.0.3 tha...

Unspecified Vulnerability in NETGEAR WNR614

The Netgear WNR614 is an N300 wireless router with external antenna from Netgear USA. The Netgear WNR614 has a security vulnerability that originates from storing credentials in plain text. No details of the vulnerability are provided at this time...

PT-2024-20720 · Ibm · Ibm Jazz Reporting Service

Name of the Vulnerable Software and Affected Versions: IBM Jazz Reporting Service version 7.0.3 Description: The issue concerns the storage of user credentials in plain clear text, which can be accessed by an admin user. Recommendations: For IBM Jazz Reporting Service version 7.0.3, consider...

Security Bulletin: IBM Jazz Reporting Service is vulnerable to Information Disclosure (CVE-2024-25052)

Summary If Jazz Authentication Service is enabled, IBM Jazz Reporting System shows the JSA Client Secret in plain text. Vulnerability Details CVEID:CVE-2024-25052 DESCRIPTION: IBM Jazz Reporting Service stores user credentials in plain clear text which can be read by an Admin user. CVSS Base scor...

PT-2024-4581 · Unknown · Sinec Traffic Analyzer

Name of the Vulnerable Software and Affected Versions: SINEC Traffic Analyzer versions prior to V1.2 Description: A vulnerability has been identified in the web server of SINEC Traffic Analyzer, where it is not enforcing HSTS. This could allow an attacker to perform downgrade attacks, exposing...

Netgear WNR614 安全漏洞

The Netgear WNR614 is an N300 wireless router with external antenna from Netgear USA. The Netgear WNR614 has a security vulnerability that originates from storing credentials in plain text. No details of the vulnerability are provided at this time...

GHSA-M96R-7VQM-J95G Typo3 Information Disclosure in User Authentication

It has been discovered that login failures have been logged on the default stream with log level "warning" including plain-text user credentials...

Typo3 Information Disclosure in User Authentication

It has been discovered that login failures have been logged on the default stream with log level "warning" including plain-text user credentials...

Information Disclosure

typo3/cms-core is vulnerable to Information Disclosure. The vulnerability is due to login failures being logged at the "warning" level instead of the "debug" level, which exposes plain text credential information...

keycloak: exposure of sensitive information in Pushed Authorization Requests (PAR) KC_RESTART cookie

A flaw was found in Keycloak in OAuth 2.0 Pushed Authorization Requests PAR. Client-provided parameters were found to be included in plain text in the KCRESTART cookie returned by the authorization server's HTTP response to a requesturi authorization request, possibly leading to an information...

CVE-2024-36964

In the Linux kernel, the following vulnerability has been resolved: fs/9p: only translate RWX permissions for plain 9P2000 Garbage in plain 9P2000's perm bits is allowed through, which causes it to be able to set among others the suid bit. This was presumably not the intent since the unix extende...

CVE-2024-31493

An improper removal of sensitive information before storage or transfer vulnerability CWE-212 in FortiSOAR version 7.3.0, version 7.2.2 and below, version 7.0.3 and below may allow an authenticated low privileged user to read Connector passwords in plain-text via HTTP responses...

CVE-2024-31493

An improper removal of sensitive information before storage or transfer vulnerability CWE-212 in FortiSOAR version 7.3.0, version 7.2.2 and below, version 7.0.3 and below may allow an authenticated low privileged user to read Connector passwords in plain-text via HTTP responses...

CVE-2024-36964

In the Linux kernel, the following vulnerability has been resolved: fs/9p: only translate RWX permissions for plain 9P2000 Garbage in plain 9P2000's perm bits is allowed through, which causes it to be able to set among others the suid bit. This was presumably not the intent since the unix extende...

CVE-2024-31493

An improper removal of sensitive information before storage or transfer vulnerability CWE-212 in FortiSOAR version 7.3.0, version 7.2.2 and below, version 7.0.3 and below may allow an authenticated low privileged user to read Connector passwords in plain-text via HTTP responses...

CVE-2024-31493

An improper removal of sensitive information before storage or transfer vulnerability CWE-212 in FortiSOAR version 7.3.0, version 7.2.2 and below, version 7.0.3 and below may allow an authenticated low privileged user to read Connector passwords in plain-text via HTTP responses...

PT-2024-24119 · Fortinet · Fortisoar

Name of the Vulnerable Software and Affected Versions: FortiSOAR versions 7.0.3 and below FortiSOAR versions 7.2.2 and below FortiSOAR version 7.3.0 Description: The issue allows an authenticated low privileged user to read Connector passwords in plain-text via HTTP responses due to an improper...

GHSA-QVPJ-W7XJ-R6W9 Password confirmation stored in plain text via registration form in statamic/cms

Users registering via the user:registerform tag will have their password confirmation stored in plain text in their user file. Impact This only affects sites matching all of the following conditions: - Running Statamic versions between 5.3.0 and 5.6.1. This version range represents only one...