SAP Business Client 安全漏洞

SAP Business Client is a user interface client program from SAP. The program supports access to multiple SAP applications from a single platform. SAP Business Client has a security vulnerability that allows him to read extremely sensitive data such as credentials. This would allow an attacker to...

PT-2020-18137

Name of the Vulnerable Software and Affected Versions IBM Tivoli Key Lifecycle Manager versions 3.0 through 4.0 Description The issue allows a local user to read user credentials stored in plain text. Recommendations For IBM Tivoli Key Lifecycle Manager versions 3.0 through 4.0, consider...

IBM Security Guardium Insights Information Disclosure Vulnerability (CNVD-2020-50793)

IBM Security Guardium Insights is a modern hybrid cloud data security hub designed to provide a reliable view of an organization's data security and compliance posture. An information disclosure vulnerability exists in IBM Security Guardium Insights 2.0.1, which can be exploited by a local user t...

Hardcoded credentials

The Pilot Below Deck Equipment BDE and OpenPort implementations on Iridium satellite terminals allow remote attackers to read hardcoded credentials via the web interface...

PT-2013-4447

Name of the Vulnerable Software and Affected Versions GroundWork Monitor Enterprise version 6.7.0 Description The issue concerns improper authorization checks in the Cacti component, allowing remote authenticated users to read or modify configuration settings. This can be exploited to read...

samba: information disclosure in suid mount.cifs

mount.cifs in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8 and 3.4 before 3.4.2, when mount.cifs is installed suid root, does not properly enforce permissions, which allows local users to read part of the credentials file and obtain the password by specifying the path to the...

CVE-2004-0165

Format string vulnerability in Point-to-Point Protocol PPP daemon pppd 2.4.0 for Mac OS X 10.3.2 and earlier allows remote attackers to read arbitrary pppd process data, including PAP or CHAP authentication credentials, to gain privileges...