Unspecified Vulnerability in CloudBees Jenkins Caliper CI Plugin

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Caliper CI Plugin is used in one of the...

Unspecified Vulnerability in CloudBees Jenkins Mashup Portlets Plugin

CloudBees Jenkins Hudson Labs is a set of Java-based development of the United States CloudBees continuous integration tools. The product is mainly used to monitor the continuous software version of the release/testing project and some timed execution of the task . Mashup Portlets Plugin is used ...

Unspecified Vulnerability in CloudBees Jenkins Port Allocator Plugin

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Port Allocator Plugin is used in which a TCP...

Unspecified Vulnerability in CloudBees Jenkins Gogs Plugin

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software release/testing projects and some timed tasks . Gogs Plugin is used in one of the Gogs self-hosted Gi...

Red Hat Undertow Trust Management Issues Vulnerability

Red Hat Undertow is a U.S. Red Hat Red Hat, a Java-based embedded Web server, is the default Web server Wildfly Java application server. A trust management issue vulnerability exists in Red Hat Undertow versions prior to 2.0.21. An attacker could exploit the vulnerability to disclose credentials ...

CVE-2019-3947

Fuji Electric V-Server before 6.0.33.0 stores database credentials in project files as plaintext. An attacker that can gain access to the project file can recover the database credentials and gain access to the database server...

IBM Cloud Private Trust Management Issues Vulnerabilities

IBM Cloud Private is a set of enterprise private cloud solutions from IBM USA. The product is built primarily on Kubernetes and container technology. A security vulnerability exists in IIBM Cloud Private versions 1.0.0 to 3.0.1, which stems from the program storing user credentials in plaintext. ...

PT-2019-7839 · Red Hat · Business Central +1

Name of the Vulnerable Software and Affected Versions: KIE server and Business Central versions prior to 7.21.0.Final Description: A security issue has been reported where username and password are stored as plaintext Java properties. This allows any application deployed on the same server to...

CVE-2018-13992

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 allows for plaintext transmission HTTP of user credentials by default...

Sierra Wireless AirLink ES450 Information Disclosure Vulnerability

The Sierra Wireless AirLink ES450 is a cellular network modem device from Sierra Wireless Canada. An information disclosure vulnerability exists in the ACEManager authentication feature in the Sierra Wireless AirLink ES450 using firmware version 4.9.3, which can be exploited by an attacker to sni...

CVE-2019-0032

A password management issue exists where the Organization authentication username and password were stored in plaintext in log files. A locally authenticated attacker who is able to access these stored plaintext credentials can use them to login to the Organization. Affected products are: Juniper...

PT-2019-11693 · Jenkins · Jenkins Netsparker Cloud Scan Plugin +2

Name of the Vulnerable Software and Affected Versions: Jenkins Netsparker Cloud Scan Plugin version 1.1.5 and older Jenkins Netsparker Enterprise Scan Plugin affected versions not specified Description: The issue concerns the storage of sensitive information in plain text within configuration fil...

CVE-2018-17500

Envoy Passport for Android and Envoy Passport for iPhone could allow a local attacker to obtain sensitive information, caused by the storing of hardcoded OAuth Creds in plaintext. An attacker could exploit this vulnerability to obtain sensitive information...

MarcomCentral FusionPro VDP Creator Path Traversal Vulnerability

MarcomCentral FusionPro VDP Creator is a variable data publishing design and layout tool from MarcomCentral USA. A directory traversal vulnerability exists in the FPProducerInternetServer.exe service/utility in MarcomCentral FusionPro VDP Creator versions prior to 10.0. A remote attacker could us...

Ansible User Module Information Disclosure Vulnerability

Ansible is a computer system configuration manager from Ansible, Inc. that can be used to publish, manage, and organize computer systems.User module is one of the user modules. An information disclosure vulnerability exists in the User module in Ansible. The vulnerability can be exploited by an...

Unprotected VOIP Server Exposed Millions of SMS Messages, Call Logs

A California-based Voice-Over-IP VoIP services provider VOIPO has accidentally left tens of gigabytes of its customer data, containing millions of call logs, SMS/MMS messages, and plaintext internal system credentials, publicly accessible to anyone without authentication. VOIPo is one of a leadin...

CloudBees Jenkins Artifactory Plugin Disk Unencryption Vulnerability

CloudBees Jenkins formerly known as Hudson Labs is a set of Java-based continuous integration tools from CloudBees, Inc. that are used to monitor ongoing software releases/testing projects and some timed tasks.Artifactory Plugin is a plugin that is used to release, parse and Publish traceable bui...

Authorization

Kibana versions 4.0 to 4.6, 5.0 to 5.6.12, and 6.0 to 6.4.2 contain an error in the way authorization credentials are used when generating PDF reports. If a report requests external resources plaintext credentials are included in the HTTP request that could be recovered by an external resource...

CVE-2018-17245

Kibana versions 4.0 to 4.6, 5.0 to 5.6.12, and 6.0 to 6.4.2 contain an error in the way authorization credentials are used when generating PDF reports. If a report requests external resources plaintext credentials are included in the HTTP request that could be recovered by an external resource...

Versa Networks: Plaintext Credentials in Backups & Configs

In Versa Director, the unencrypted backup files stored on the Versa deployment contain credentials stored within configuration files. These credentials are for various application components such as SNMP, and SSL and Trust keystores...