1111 matches found
Design/Logic Flaw
The SSH Plugin stores credentials which allow jobs to access remote servers via the SSH protocol. User passwords and passphrases for encrypted SSH keys are stored in plaintext in a configuration file...
CVE-2017-1000245
The SSH Plugin stores credentials which allow jobs to access remote servers via the SSH protocol. User passwords and passphrases for encrypted SSH keys are stored in plaintext in a configuration file...
CVE-2017-1000245
Summary: CVE-2017-1000245 affects the Jenkins SSH Plugin, where user passwords and passphrases for encrypted SSH keys are stored in plaintext in a configuration file. This credential storage flaw can lead to disclosure of sensitive credentials used to access remote servers. The provided connected...
CVE-2017-13771
Lexmark Scan To Network SNF 3.2.9 and earlier stores network configuration credentials in plaintext and transmits them in requests, which allows remote attackers to obtain sensitive information via requests to 1 cgi-bin/direct/printer/prtappauth/apps/snfDestServlet or 2...
CVE-2010-3845
libapache-authenhook-perl 2.00-04 stores usernames and passwords in plaintext in the vhost error log...
CVE-2017-4923
VMware vCenter Server 6.5 prior to 6.5 U1 contains an information disclosure vulnerability. This issue may allow plaintext credentials to be obtained when using the vCenter Server Appliance file-based backup feature...
CVE-2017-4923
VMware vCenter Server 6.5 prior to 6.5 U1 contains an information disclosure vulnerability. This issue may allow plaintext credentials to be obtained when using the vCenter Server Appliance file-based backup feature...
Information disclosure
VMware vCenter Server 6.5 prior to 6.5 U1 contains an information disclosure vulnerability. This issue may allow plaintext credentials to be obtained when using the vCenter Server Appliance file-based backup feature...
CVE-2017-4923
CVE-2017-4923 affects VMware vCenter Server Appliance backup: version 6.5 before 6.5 U1 stores sensitive backup data in plaintext, enabling information disclosure. Root cause: plaintext storage of credentials in the vCenter backup feature. Impact: plaintext credentials disclosure possible via fil...
IBM InfoSphere Master Data Management Server Local Information Disclosure Vulnerability
IBM InfoSphere MDM Reference Data Management Hub is a suite of data management solutions from IBM USA. The product provides data management, security and auditing capabilities. A local information disclosure vulnerability exists in IBM InfoSphere MDM Reference Data Management Hub, which originate...
CVE-2017-1309
IBM InfoSphere Master Data Management Server 11.0 - 11.6 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 125463...
IBM WebSphere MQ Plaintext Credential Information Disclosure Vulnerability
IBM MQ formerly known as IBM WebSphere MQ is a messaging middleware product from IBM. The product focuses on providing a reliable and proven messaging backbone for Service Oriented Architecture SOA. A security vulnerability exists in IBM MQ versions 9.0.1 and 9.0.2, which originates from the...
IBM Integration Bus Information Disclosure Vulnerability (CNVD-2017-22088)
IBM Integration Bus formerly known as IBM WebSphere Message Broker is an enterprise service bus ESB product from IBM. The product provides connectivity and common data transformations for Service Oriented Architecture SOA environments and non-SOA environments. An information disclosure...
CVE-2017-7315
An issue was discovered on Humax Digital HG100R 2.0.6 devices. To download the backup file it's not necessary to use credentials, and the router credentials are stored in plaintext inside the backup, aka GatewaySettings.bin...
CVE-2017-7315
CVE-2017-7315 concerns Humax Digital HG100R devices (version 2.0.6). The vulnerability enables download of the backup file without authentication, and GatewaySettings.bin includes the router credentials in plaintext. This exposes sensitive credentials and configuration to an attacker who can obta...
VMware vSphere Data Protection Local Storage vCenter Server Credentials Vulnerability
VMware vSphere Data Protection VDP is a disk-based backup and recovery solution from VMware. Integrated with VMware vCenter Server, the server and virtualization management software, the solution can be used to centrally manage backup jobs while storing backup files in deduplicated target storage...
VMware vSphere Data Protection Remote Code Execution (CVE-2017-4914)
Multiple vulnerabilities have been reported in VMware vSphere Data Protection. The vulnerabilities are due to improper Java deserialization and use of reversible encryption. A remote attacker could exploit one of the vulnerabilities by sending specially crafted data to the targeted server, which...
PT-2017-7166 · D Link · Dvg-N5402Sp
Name of the Vulnerable Software and Affected Versions: D-Link DVG-N5402SP versions W1000CN-00, W1000CN-03, W2000EN-00 Description: The issue allows remote attackers to obtain sensitive information, including usernames, passwords, keys, values, and web account hashes for super and admin accounts,...
IBM BigFix Inventory and License Metric Tool Information Disclosure Vulnerability
IBM BigFix Inventory and License Metric Tool are both products of IBM USA. The former is a set of software for endpoint security review and mitigation applied to information security management, and the latter is a set of free tools applied to IT service management used to help determine processo...