kafka: Connect REST API exposes plaintext secrets in tasks endpoint

When Connect workers in Apache Kafka 2.0.0, 2.0.1, 2.1.0, 2.1.1, 2.2.0, 2.2.1, or 2.3.0 are configured with one or more config providers, and a connector is created/updated on that Connect cluster to use an externalized secret variable in a substring of a connector configuration property value,...

Unspecified vulnerability in rConfig (CNVD-2020-22276)

rConfig is an open source network configuration management utility . A security vulnerability exists in the includes/head.inc.php file in versions of rConfig prior to 3.9.4, which can be exploited to retrieve stored credentials in plaintext form by sending a GET request to the settings.php file...

Design/Logic Flaw

Comba AP2600-I devices through A02,0202N00PD2 are prone to password disclosure via an insecure authentication mechanism. The HTML source code of the login page contains values that allow obtaining the username and password. The username are password values are a double md5 of the plaintext real...

CVE-2019-15653

The CVE-2019-15653 entry affects Comba AP2600-I devices (through A02,0202N00PD2). The root issue is an insecure authentication mechanism that exposes credentials via the login page’s HTML source, where usernames and passwords are derivable; specifically, usernames/passwords are the double MD5 of ...

Information Disclosure

djangonopassword is vulnerable to information disclosure. The vulnerability exists because it stores the sensitive login codes in the database and compares the codes in plaintext formats at the time of login...

Broadcom Wi-Fi Devices - (KR00K) Information Disclosure Exploit

Kr00ker Experimetal KR00K PoC in python3 using scapy Description: This script is a simple experiment to exploit the KR00K vulnerability CVE-2019-15126, that allows to decrypt some WPA2 CCMP data in vulnerable devices. More specifically this script attempts to retrieve Plaintext Data of WPA2 CCMP...

Broadcom Wi-Fi Devices - 'KR00K Information Disclosure

Kr00ker Experimetal KR00K PoC in python3 using scapy Description: This script is a simple experiment to exploit the KR00K vulnerability CVE-2019-15126, that allows to decrypt some WPA2 CCMP data in vulnerable devices. More specifically this script attempts to retrieve Plaintext Data of WPA2 CCMP...

Lenovo XClarity Administrator Information Disclosure Vulnerability (CNVD-2020-19571)

Lenovo XClarity Administrator LXCA is a centralized resource management solution from Lenovo, China. The product is capable of providing agentless hardware management for servers, storage, network switches, and more. A security vulnerability exists in Lenovo LXCA version 2.6.0, which originated...

WatchGuard Fireware Plaintext Password Vulnerability

WatchGuard Fireware is a firewall operating system from WatchGuard USA. The system supports intrusion protection, spam virus email filtering, SSL VPN, and more. A security vulnerability exists in the AD Helper component of WatchGuard Fireware versions prior to 5.8.5.10317. A remote attacker can...

WAGO e!COCKPIT Encryption Problem Vulnerability

WAGO e!COCKPIT is a set of integrated development environment software from the German company WAGO. The software is mainly used for hardware configuration, programming and simulation. WAGO e!COCKPIT suffers from a cryptographic issue that can be exploited by an attacker to recover the password o...

WatchGuard Fireware AD Helper Component 5.8.5.10317 - Credential Disclosure

WatchGuard Fireware AD Helper Component 5.8.5.10317 - Credential Disclosure Exploit: WatchGuard Fireware AD Helper Component 5.8.5.10317 - Credential Disclosure Author: RedTeam Pentesting GmbH Date: 2020-03-11 Vendor: https://www.watchguard.com Software link:...

WAGO e!Cockpit Network Communication Plaintext Transfer Vulnerability

Cockpit is an interactive server management interface. A network communications plaintext transfer vulnerability exists in WAGO e!Cockpit, which can be exploited by an attacker to intercept, interpret, and manipulate data from or to e...

WatchGuard Fireware AD Helper 5.8.5.10317 Credential Disclosure

Exploit: WatchGuard Fireware AD Helper Component 5.8.5.10317 - Credential Disclosure Author: RedTeam Pentesting GmbH Date: 2020-03-11 Vendor: https://www.watchguard.com Software link: https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Fireware/services/tdr/tdradhelperc.html CVE:...

Information Disclosure Vulnerability in Multiple Rockwell Automation Products

Rockwell Automation MicroLogix 1400 Controllers Series A and so on are the products of Rockwell Automation, Inc.Rockwell Automation MicroLogix 1400 Controllers Series A is a programmable logic controller.MicroLogix 1100 Controllers is a programmable logic controller.RSLogix 500 Software is a set ...

Design/Logic Flaw

Jenkins Zephyr for JIRA Test Management Plugin 1.5 and earlier stores its credentials in plain text in a global configuration file on the Jenkins master file system...

CVE-2020-2153

CVE-2020-2153 affects Jenkins Backlog Plugin versions 2.4 and earlier. The root cause is that credentials are transmitted in plain text as part of job configuration forms, while stored credentials remain encrypted on disk. This can expose credentials to users with Extended Read permission when co...

CVE-2020-2150

CVE-2020-2150 affects Jenkins Sonar Quality Gates Plugin versions 1.3.1 and earlier. The issue arises because credentials are stored encrypted on disk in GlobalConfig.xml but transmitted in plain text via the plugin’s global configuration form, potentially exposing them (e.g., through browser ext...

CVE-2020-2149

CVE-2020-2149 affects Jenkins Repository Connector Plugin (versions 1.2.6 and earlier). The flaw is that configured credentials are transmitted in plain text as part of the global Jenkins configuration form, even though credentials are stored encrypted on disk in RepositoryConfiguration.xml. This...

PT-2020-15371 · Jenkins +1 · Jenkins Zephyr For Jira Test Management Plugin +2

Name of the Vulnerable Software and Affected Versions: Jenkins Zephyr for JIRA Test Management Plugin versions 1.5 and earlier Description: The issue concerns the storage of credentials in plain text in a global configuration file on the Jenkins master file system. Specifically, the Zephyr for JI...

PT-2020-15373 · Jenkins · Jenkins Deployhub Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins DeployHub Plugin versions 8.0.14 and earlier Description: The issue concerns the transmission of configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure. The credentials are...