CVE-2024-42457

A vulnerability in Veeam Backup & Replication allows users with certain operator roles to expose saved credentials by leveraging a combination of methods in a remote management interface. This can be achieved using a session object that allows for credential enumeration and exploitation, leading ...

CVE-2024-42457: Insufficiently Protected Credentials

A vulnerability in Veeam Backup & Replication allows users with certain operator roles to expose saved credentials by leveraging a combination of methods in a remote management interface. This can be achieved using a session object that allows for credential enumeration and exploitation, leading ...

CVE-2024-52523 Nextcloud Server Custom defined credentials of external storages are sent back to the frontend

Nextcloud Server is a self hosted personal cloud system. After setting up a user or administrator defined external storage with fixed credentials, the API returns them and adds them into the frontend again, allowing to read them in plain text when an attacker already has access to an active sessi...

NextCloud information leakage vulnerability

Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. Nextcloud suffers from an information disclosure vulnerability that stems from the fact that after storing "global credentials" on the server, the API returns...

CVE-2022-45157: Insufficiently Protected Credentials

A vulnerability has been identified in the way that Rancher stores vSphere's CPI Cloud Provider Interface and CSI Container Storage Interface credentials used to deploy clusters through the vSphere cloud provider. This issue leads to the vSphere CPI and CSI passwords being stored in a plaintext...

CVE-2024-47588

In SAP NetWeaver Java Software Update Manager 1.1, under certain conditions when a software upgrade encounters errors, credentials are written in plaintext to a log file. An attacker with local access to the server, authenticated as a non-administrative user, can acquire the credentials from the...

CVE-2024-47588: Insufficiently Protected Credentials

In SAP NetWeaver Java Software Update Manager 1.1, under certain conditions when a software upgrade encounters errors, credentials are written in plaintext to a log file. An attacker with local access to the server, authenticated as a non-administrative user, can acquire the credentials from the...

PT-2024-8860

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Java Software Update Manager 1.1 Description: The issue is related to insufficient protection of registration data. Under certain conditions, when a software upgrade encounters errors, credentials are written in plaintext to a l...

D3D Security IP Camera Plaintext Information Disclosure

The vulnerability of the microprogrammed network IP camera D3D Security IP Camera D8801 lies in the transmission of critical information in plaintext. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain user credentials through a specially created HTTP packe...

SUSE CVE-2022-45157

A vulnerability has been identified in the way that Rancher stores vSphere's CPI Cloud Provider Interface and CSI Container Storage Interface credentials used to deploy clusters through the vSphere cloud provider. This issue leads to the vSphere CPI and CSI passwords being stored in a plaintext...

PT-2024-10044 · Rancher +1 · Rancher +1

Name of the Vulnerable Software and Affected Versions: Rancher versions prior to 2.8.9 Rancher versions prior to 2.9.3 Rancher versions 2.7.0 through 2.7.x Description: A vulnerability has been identified in the way that Rancher stores vSphere's CPI Cloud Provider Interface and CSI Container...

CVE-2024-10025

A vulnerability in the .sdd file allows an attacker to read default passwords stored in plain text within the code. By exploiting these plaintext credentials, an attacker can log into affected SICK products as an “Authorized Client” if the customer has not changed the default password...

CVE-2024-10025 Vulnerability in SICK CLV6xx, SICK Lector6xx and SICK RFx6xx

A vulnerability in the .sdd file allows an attacker to read default passwords stored in plain text within the code. By exploiting these plaintext credentials, an attacker can log into affected SICK products as an “Authorized Client” if the customer has not changed the default password...

CVE-2024-10025

The CVE describes a vulnerability in the .sdd files of SICK CLV6xx, Lector6xx and RFx6xx products where an attacker can read default passwords stored in plaintext in the code. Exploitation enables logging in as an “Authorized Client” if the customer did not change the default password, potentiall...

CVE-2024-35294

An unauthenticated remote attacker may use the devices traffic capture without authentication to grab plaintext administrative credentials...

Schneider Electric Series 700 Access Control Vulnerability

The Schneider Electric Series 700 is a series of power transfer switches from Schneider Electric France. An access control error vulnerability exists in the Schneider Electric Series 700 version 0.1.17.8 and earlier, which stems from the fact that an attacker can use unauthenticated device traffi...

CVE-2024-8452

Certain switch models from PLANET Technology only support obsolete algorithms for authentication protocol and encryption protocol in the SNMPv3 service, allowing attackers to obtain plaintext SNMPv3 credentials potentially...

CVE-2024-8452

Certain switch models from PLANET Technology only support obsolete algorithms for authentication protocol and encryption protocol in the SNMPv3 service, allowing attackers to obtain plaintext SNMPv3 credentials potentially...

CVE-2024-8452 PLANET Technology switch devices - Insecure hash functions used for SNMPv3 credentials

Certain switch models from PLANET Technology only support obsolete algorithms for authentication protocol and encryption protocol in the SNMPv3 service, allowing attackers to obtain plaintext SNMPv3 credentials potentially...

CVE-2024-8452

CVE-2024-8452 affects PLANET Technology switch models where SNMPv3 authentication/encryption rely on obsolete algorithms, enabling potential exposure of plaintext SNMPv3 credentials. The vulnerability is rooted in the SNMPv3 service cryptographic choices and is described with a high impact to con...