wildfly: resource adapter logs plaintext JMS password at warning level on connection error

A flaw was found in wildfly. JMS passwords are logged by the resource adaptor in plain text at the warning level when a connection error occurs allowing any user that has access to the log to gain access to this sensitive information. The highest threat from this vulnerability is to data...

CentOS 8 : 389-ds:1.4 (CESA-2019:3401)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:3401 advisory. - 389-ds-base: replication and the Retro Changelog plugin store plaintext password by default CVE-2018-10871 - 389-ds-base: using dscreate in verbose...

Design/Logic Flaw

GigaVUE-OS GVOS 5.4 - 5.9 stores a Redis database password in plaintext...

CVE-2020-23249

CVE-2020-23249 affects GigaVUE-OS (GVOS) versions 5.4–5.9, where the Redis database password is stored in plaintext. The root cause is insecure storage of the Redis password, which could allow an attacker to obtain the database password and potentially perform further attacks. The connected docum...

Urve Information Disclosure Vulnerability

Urve is a device for booking meeting rooms/rooms from Urve UK. The device supports integration with MS Exchange, Lotus, Office 365, Google Calendar and other systems to support meeting room and guest room reservations. A security vulnerability exists in URVE Build 24.03.2020, which arises when th...

Zyxel USG Series Encryption Issues Vulnerabilities

The Zyxel USG Series is a series of firewall devices from Zyxel, China, for use in corporate environments. A security vulnerability exists in Zyxel USG devices Firmware version 4.60, which stems from the inclusion of an undocumented account zyfwp and an unchangeable password. The password for thi...

Apache Airflow Encryption Problem Vulnerability

Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. A security vulnerability exists in Apache Airflow versions prior to 1.10.13, which...

Insufficient Information

chromium is vulnerable to insufficient Information.The vulnerability exists due to LDAP password credential are stored in plaintext. which allows to remote attacker to bypass navigation restrictions via a crafted HTML page...

CVE-2019-16211

Brocade SANnav versions before v2.1.0, contain a Plaintext Password Storage vulnerability...

Design/Logic Flaw

Brocade SANnav versions before v2.1.0, contain a Plaintext Password Storage vulnerability...

CVE-2019-16211

CVE-2019-16211 affects Brocade SANnav versions before v2.1.0 and is described as a plaintext password storage vulnerability. Public records in NVD list a CVSS v3.1 base score of 9.8 (CRITICAL) with network access, no privileges, and high confidentiality/integrity/availability impact. Lenovo’s sec...

U.S. Dept Of Defense: Password Cracking - Weak Password Used to Secure ████ Containing a Plaintext Password

Summary: I was able to crack the password to the ████████ located at ██████, as the pdf was protected with a weak password contained in a common word list. This guide contains steps to set-up the ███████ secure communication application with the unprotected configuration file located at██████████...

CloudBees Jenkins Zephyr Enterprise Test Management Plugin Information Disclosure Vulnerability

CloudBees Jenkins Hudson Labs is a set of Java-based development of continuous integration tools from the U.S. CloudBees. The product is mainly used to monitor the continuous software version release/testing project and some timed tasks . Zephyr Enterprise Test Management Plugin is used in one of...

Exploit for CVE-2020-1472

CVE-2020-1472 - Zero-Logon POC !alt texthttps://github.com...

Exploit for CVE-2020-1472

CVE-2020-1472 POC Requires the latest impacket from GitHubh...

BSA-2020-1076

Security Advisory ID : BSA-2020-1076 Component : Database credentials Revision : 1.1 Brocade SANnav versions before v2.1.0, contain a Plaintext Password Storage vulnerability. Database credentials are stored in plaintext in a configuration file. An unauthenticated malicious user with access to th...

GNOME gnome-shell password disclosure vulnerability

gnome-shell is a shell for the GNOME desktop that provides core user interface functions such as switching windows, launching applications or viewing notifications. A security vulnerability exists in GNOME gnome-shell 3.36.4 and earlier versions, which stems from the fact that if a password is se...

CVE-2020-15085 Client caching login operation with plaintext password in Saleor Storefront

In Saleor Storefront before version 2.10.3, request data used to authenticate customers was inadvertently cached in the browser's local storage mechanism, including credentials. A malicious user with direct access to the browser could extract the email and password. In versions prior to 2.10.0...

Information Disclosure

foreman is vulnerable to information disclosure. The delete compute resource operation allows for the disclosure of the plaintext password or token for the affected compute resource. A malicious user with the deletecomputeresource permission is able to exploit the vulnerability to take control ov...

CVE-2019-19107

The Configuration pages in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway for user profiles and services transfer the password in plaintext although hidden when displayed...