CVE-2020-16280

CVE-2020-16280 affects RangeeOS 8.0.4 modules, where credentials are stored in plaintext. A local attacker with OS access can obtain credentials for multiple users, including external-facing administrative services, domain users, and local administrators. The connected sources confirm plaintext c...

CVE-2020-16280

Multiple Rangee GmbH RangeeOS 8.0.4 modules store credentials in plaintext including credentials of users for several external facing administrative services, domain joined users, and local administrators. To exploit the vulnerability a local attacker must have access to the underlying operating...

CVE-2020-10609

Grundfos CIM 500 v06.16.00 stores plaintext credentials, which may allow sensitive information to be read or allow modification to system settings by someone with access to the device...

CVE-2020-10609

Grundfos CIM 500 v06.16.00 stores plaintext credentials, which may allow sensitive information to be read or allow modification to system settings by someone with access to the device...

Information disclosure

Grundfos CIM 500 v06.16.00 stores plaintext credentials, which may allow sensitive information to be read or allow modification to system settings by someone with access to the device...

CVE-2020-10609

Grundfos CIM 500 v06.16.00 stores plaintext credentials, which may allow sensitive information to be read or allow modification to system settings by someone with access to the device...

CVE-2020-10609

CVE-2020-10609 affects Grundfos CIM 500 embedded Ethernet module. The vulnerability is unprotected storage of credentials : the device stores plaintext credentials, enabling read access or modification of system settings by someone with access to the device. Affected version: all prior to v06.16....

Schneider Electric Easergy Builder Sensitive Information Plaintext Storage Vulnerability

The Schneider Electric Easergy Builder is used by expert engineering teams to configure the T300 grid automation platform. Schneider Electric Easergy Builder 1.4.7.2 and earlier versions contain a sensitive information plaintext storage vulnerability that can be exploited by an attacker to read...

IBM Verify Gateway (IVG) User Credentials Plaintext Storage Vulnerability

IBM Verify Gateway IVG is a cloud-based authentication solution from IBM in the United States. A user credentials plaintext storage vulnerability exists in IBM Verify Gateway IVG. A local attacker could exploit this vulnerability to read user credentials...

Grundfos CIM 500 Unprotected Credential Storage Vulnerability

The Grundfos CIM 500 is an Ethernet module from the Danish company Grundfos. A security vulnerability exists in Grundfos CIM 500 versions prior to v06.16.00, which stems from the program storing credentials in plaintext form. An attacker could exploit the vulnerability to read sensitive informati...

Unspecified Vulnerability in BIOTRONIK CardioMessenger II-S

The Biotronik CardioMessenger II-S is a portable medical monitoring device from Biotronik Germany. A security vulnerability exists in Biotronik CardioMessenger II-S T-Line T4APP version 2.20 and II-S GSM T4APP version 2.20, which originates from the transmission of credentials in plaintext form...

Philips IntelliBridge Enterprise Log Information Disclosure Vulnerability

Philips IntelliBridge Enterprise IBE is a solution from Philips in the Netherlands that provides a single point of contact between EHRs electronic health records and Philips clinical solutions. A log information disclosure vulnerability exists in Philips IBE B.12 and earlier versions that can be...

TestLink has an unspecified vulnerability

TestLink is the TestLink team's set of open source software for managing the software testing process and providing statistical analysis. An unspecified vulnerability exists in TestLink. An attacker can exploit this vulnerability to obtain credentials in plaintext with the 'viewer' parameter of t...

CVE-2019-19105

CVE-2019-19105 affects ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway. The backup feature stores the application’s current settings and credentials (including user accounts and other configuration credentials) in plaintext, exposing confidentiality. Exploitation details a...

IBM UrbanCode Deploy Credential Stealing Vulnerability

IBM UrbanCode Deploy UCD is a set of application automation deployment tools from IBM in the United States. The tool is based on an application deployment automation management information model, and through remote agent technology, to realize the complex application in different environments, su...

Castle Rock Computing SNMPc Online has an Unspecified Vulnerability

Castle Rock Computing SNMPc Online is an advanced reporting plug-in for SNMPc Enterprise Network Manager from Castle Rock Computing, USA. Castle Rock Computing SNMPc Online suffers from an unspecified vulnerability that originates from a cookie value with a username and password in plaintext form...

Unspecified Vulnerability in Deskpro (CNVD-2020-22251)

Deskpro is a helpdesk software solution that helps companies manage communication with their customers and user base across multiple channels. A security vulnerability exists in Deskpro versions prior to 2019.8.0 that stems from the /api/emailaccounts endpoint failing to properly validate user...

Unspecified vulnerability in rConfig (CNVD-2020-22276)

rConfig is an open source network configuration management utility . A security vulnerability exists in the includes/head.inc.php file in versions of rConfig prior to 3.9.4, which can be exploited to retrieve stored credentials in plaintext form by sending a GET request to the settings.php file...

WatchGuard Fireware AD Helper Component 5.8.5.10317 - Credential Disclosure

WatchGuard Fireware AD Helper Component 5.8.5.10317 - Credential Disclosure Exploit: WatchGuard Fireware AD Helper Component 5.8.5.10317 - Credential Disclosure Author: RedTeam Pentesting GmbH Date: 2020-03-11 Vendor: https://www.watchguard.com Software link:...

CVE-2020-2153

CVE-2020-2153 affects Jenkins Backlog Plugin versions 2.4 and earlier. The root cause is that credentials are transmitted in plain text as part of job configuration forms, while stored credentials remain encrypted on disk. This can expose credentials to users with Extended Read permission when co...