CVE-2023-34829

Incorrect access control in TP-Link Tapo before v3.1.315 allows attackers to access user credentials in plaintext...

TP-LINK Tapo Security Breach

TP-LINK Tapo is a series of secure WiFi cameras from the Chinese company TP-LINK. A security vulnerability exists in TP-LINK Tapo versions prior to v3.1.315, which stems from incorrect access control allowing an attacker to access user credentials in plaintext...

CVE-2023-34829

CVE-2023-34829 affects TP-Link Tapo prior to v3.1.315. The issue is incorrect access control that allows an attacker to obtain user credentials in plaintext, exposing confidentiality (base score 6.5, MEDIUM). The vulnerability impacts authentication/credential handling and is supported by multipl...

PT-2023-25016 · Tp Link · Tp-Link Tapo

Name of the Vulnerable Software and Affected Versions: TP-Link Tapo versions prior to 3.1.315 Description: The issue is related to incorrect access control, allowing attackers to access user credentials in plaintext. Recommendations: For versions prior to 3.1.315, update to version 3.1.315 or lat...

CVE-2023-6791

A credential disclosure vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-only administrator to obtain the plaintext credentials of stored external system integrations such as LDAP, SCP, RADIUS, TACACS+, and SNMP from the web interface...

CVE-2023-6791

A credential disclosure vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-only administrator to obtain the plaintext credentials of stored external system integrations such as LDAP, SCP, RADIUS, TACACS+, and SNMP from the web interface...

PAN-OS: Plaintext Disclosure of External System Integration Credentials

A credential disclosure vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-only administrator to obtain the plaintext credentials of stored external system integrations such as LDAP, SCP, RADIUS, TACACS+, and SNMP from the web interface. Work around: This issue...

Palo Alto Networks PAN-OS Security Vulnerability

Palo Alto Networks PAN-OS is a next-generation firewall software from Palo Alto Networks, USA. A security vulnerability exists in Palo Alto Networks PAN-OS that originates from a vulnerability that allows an attacker to obtain plaintext credentials for external system integration e.g. LDAP, etc...

Red Hat Infinispan Security Vulnerability

Red Hat Infinispan is a suite of distributed caching and key-value NoSQL datastore software from Red Hat USA. A security vulnerability exists in Red Hat Infinispan that stems from returning credentials from a configuration in plaintext...

The vulnerability of the Delta Electronics InfraSuite Device Master software for real-time device monitoring lies in improper restrictions on path names in the catalog. This allows attackers to disclose user information, obtain login credentials in plain text, or perform NTLM relay attacks.

The vulnerability of the Delta Electronics InfraSuite Device Master software for real-time device monitoring is related to an incorrect limitation on the path name to the catalog. Exploiting this vulnerability can allow a malicious actor to disclose user information, obtain login credentials in...

CVE-2023-47279

In Delta Electronics InfraSuite Device Master v.1.0.7, A vulnerability exists that allows an unauthenticated attacker to disclose user information through a single UDP packet, obtain plaintext credentials, or perform NTLM relaying...

CVE-2023-47279

In Delta Electronics InfraSuite Device Master v.1.0.7, A vulnerability exists that allows an unauthenticated attacker to disclose user information through a single UDP packet, obtain plaintext credentials, or perform NTLM relaying...

CVE-2023-47279

Delta Electronics InfraSuite Device Master (version 1.0.7) is affected by CVE-2023-47279, a path traversal-related vulnerability permitting an unauthenticated attacker to disclose user information, obtain plaintext credentials, or perform NTLM relaying through a single UDP packet. This vulnerabil...

CVE-2023-47279 Delta Electronics InfraSuite Device Master Path Traversal

In Delta Electronics InfraSuite Device Master v.1.0.7, A vulnerability exists that allows an unauthenticated attacker to disclose user information through a single UDP packet, obtain plaintext credentials, or perform NTLM relaying...

Delta Electronics InfraSuite Device Master

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION : Exploitable remotely/low attack complexity Vendor : Delta Electronics Equipment : InfraSuite Device Master Vulnerabilities : Path Traversal, Deserialization of Untrusted Data, Exposed Dangerous Method or Function. 2. RISK EVALUATION...

Nautobot Security Vulnerability

Nautobot is a web automation platform for Nautobot individual developers. A security vulnerability exists in Nautobot Plugin Device Onboarding versions 2.0.0 through 3.0.0, which stems from the disclosure of plaintext credentials when an OnboardingTask is created...

NetApp SnapGathers Security Breach

NetApp SnapGathers is a unified, scalable data protection platform from Network Appliance NetApp. A security vulnerability exists in NetApp SnapGathers versions prior to 4.9, which stems from a vulnerability that allows a locally authenticated attacker to discover plaintext domain user credential...

PT-2023-21063 · Unknown · Snapgathers

Name of the Vulnerable Software and Affected Versions: SnapGathers versions prior to 4.9 Description: The issue allows a local authenticated attacker to discover plaintext domain user credentials. Recommendations: For versions prior to 4.9, update to version 4.9 or later to resolve the issue...

CVE-2023-4380

A logic flaw exists in Ansible Automation platform. Whenever a private project is created with incorrect credentials, they are logged in plaintext. This flaw allows an attacker to retrieve the credentials from the log, resulting in the loss of confidentiality, integrity, and availability...

CVE-2023-4380

A logic flaw exists in Ansible Automation platform. Whenever a private project is created with incorrect credentials, they are logged in plaintext. This flaw allows an attacker to retrieve the credentials from the log, resulting in the loss of confidentiality, integrity, and availability...