9087 matches found
GitLab EE Token Plaintext Storage Vulnerability
GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects.GitLab EE is GitLab Enterprise Edition. A token explicit storage vulnerability exists in GitLab EE 8...
CVE-2019-19314
GitLab EE 8.4 through 12.5, 12.4.3, and 12.3.6 stored several tokens in plaintext...
Code injection
GitLab EE 8.4 through 12.5, 12.4.3, and 12.3.6 stored several tokens in plaintext...
CVE-2019-19314
GitLab EE 8.4 through 12.5, 12.4.3, and 12.3.6 stored several tokens in plaintext...
CVE-2019-19314
GitLab EE 8.4 through 12.5, 12.4.3, and 12.3.6 stored several tokens in plaintext...
CVE-2019-19314
Removed by vendor...
CVE-2019-19314
CVE-2019-19314 affects GitLab Enterprise Edition (EE) releases 8.4 through 12.5, 12.4.3, and 12.3.6, where tokens were stored in plaintext. The issue is a token exposure vulnerability in the affected EE components, not a general system compromise vector described in the provided materials. Public...
Cisco Data Center Network Manager JBoss_4_2Encrypter Hardcoded Cryptographic Key Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Cisco Data Center Network Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within th...
CVE-2019-10205
CVE-2019-10205 affects Red Hat Quay. The issue: robot account tokens are stored in plain text in the Quay database. If an attacker can run database queries, they could read or write container images stored in the registry using those tokens. Impact aligns with partial confidentiality/integrity/av...
F5 Networks BIG-IP : vCMP vulnerability (K05765031)
vCMP hypervisors incorrectly expose the plaintext unit key for their vCMP guests on the file system.CVE-2019-6670 Impact An attacker may use this vulnerability to extract the master key of vCMP guests. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
MGASA-2019-0411 Updated 389-ds-base packages fix security vulnerabilities
he updated packages fix security vulnerabilities and a packaging problem: An out-of-bounds memory read flaw was found in the way 389-ds-base handled certain LDAP search filters, affecting all versions including 1.4.x. A remote, unauthenticated attacker could potentially use this flaw to make...
Updated 389-ds-base packages fix security vulnerabilities
he updated packages fix security vulnerabilities and a packaging problem: An out-of-bounds memory read flaw was found in the way 389-ds-base handled certain LDAP search filters, affecting all versions including 1.4.x. A remote, unauthenticated attacker could potentially use this flaw to make...
Unspecified Vulnerability in CloudBees Jenkins Redgate SQL Change Automation Plugin
CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . A security vulnerability exists in CloudBees Jenkins Redgate SQL Change Automation Plugin 2.0.3 and prior versions, which stems from the program storing credentia...
CloudBees Jenkins SCTMExecutor Plugin Credential Disclosure Vulnerability
CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . A credential disclosure vulnerability exists in CloudBees Jenkins SCTMExecutor Plugin 2.2 and prior versions, which originates when the program passes encrypted...
Ansible Tower 3.5.x < 3.5.4 / 3.6.x < 3.6.2 Multiple Vulnerabilities
The version of Ansible Tower running on the remote web server is 3.5.x prior to 3.5.4 or 3.6.x prior to 3.6.2. It is, therefore, affected by multiple vulnerabilities. - An information disclosure vulnerability exists in the Sumologic and Splunk callback plugins due to Ansible not respecting the...
CVE-2019-19342
A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2 and 3.5.x before 3.5.4, when /websocket is requested and the password contains the '' character. This request would cause a socket error in RabbitMQ when parsing the password and an HTTP error code 500 and partial password disclose wi...
EulerOS 2.0 SP3 : 389-ds-base (EulerOS-SA-2019-2554)
According to the version of the 389-ds-base packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - 389-ds-base before versions 1.3.8.5, 1.4.0.12 is vulnerable to a Cleartext Storage of Sensitive Information. By default, when the Replica and/...
Unspecified Vulnerability in CloudBees Jenkins Weibo Plugin
CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . A security vulnerability exis...