NewStart CGSL CORE 5.04 / MAIN 5.04 : golang Multiple Vulnerabilities (NS-SA-2019-0047)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has golang packages installed that are affected by multiple vulnerabilities: - An arbitrary command execution flaw was found in the way Go's go get command handled the checkout of source code repositories. A remote attacker...

CVE-2019-5456

SMTP MITM refers to a malicious actor setting up an SMTP proxy server between the UniFi Controller version = 5.10.21 and their actual SMTP server to record their SMTP credentials for malicious use later...

CVE-2019-1020009

Fleet before 2.1.2 allows exposure of SMTP credentials...

CVE-2019-1020009

Fleet before 2.1.2 allows exposure of SMTP credentials...

Command injection

Fleet before 2.1.2 allows exposure of SMTP credentials...

CVE-2019-1020009

Fleet before 2.1.2 allows exposure of SMTP credentials...

PT-2019-11625

Name of the Vulnerable Software and Affected Versions: Fleet versions prior to 2.1.2 Description: The issue allows exposure of SMTP credentials. Recommendations: For versions prior to 2.1.2, update to version 2.1.2 or later to resolve the issue...

CVE-2019-1020009: Insufficiently Protected Credentials

Fleet before 2.1.2 allows exposure of SMTP credentials...

PT-2019-9534

Name of the Vulnerable Software and Affected Versions Lexmark devices affected versions not specified Description The issue allows a malicious administrator to obtain LDAP or SMTP credentials by modifying the hostname of the server to one they control and capturing the sent credentials. This...

CVE-2018-10814

Synametrics SynaMan 4.0 build 1488 uses cleartext password storage for SMTP credentials...

Default credentials

Synametrics SynaMan 4.0 build 1488 uses cleartext password storage for SMTP credentials...

CVE-2018-10814

Synametrics SynaMan 4.0 build 1488 uses cleartext password storage for SMTP credentials...

CVE-2018-10814

SynaMan 4.0 build 1488 is affected by a vulnerability where SMTP credentials are stored in plaintext, enabling information disclosure. The root cause is cleartext password storage in the configuration file (AppConfig.xml), which local users can read, leading to potential compromise of the SMTP ac...

PT-2018-10124

Name of the Vulnerable Software and Affected Versions Synametrics SynaMan version 4.0 build 1488 Description The issue concerns the use of cleartext password storage for SMTP credentials. Recommendations For Synametrics SynaMan version 4.0 build 1488, consider updating the configuration to use...

IBM InfoSphere BigInsights Information Disclosure Vulnerability

IBM InfoSphere BigInsights is a suite of software platforms for storing and analyzing "Big Data" from IBM in the United States. The platform provides solutions for managing and analyzing massive amounts of structured and unstructured data. A security vulnerability exists in IBM InfoSphere...

CVE-2014-4782: Exposure of Sensitive Information to an Unauthorized Actor

IBM InfoSphere BigInsights 2.1.2 allows remote authenticated users to discover SMTP server credentials via vectors related to the Alert management service. IBM X-Force ID: 95029...

CVE-2017-2747

HP has identified a potential security vulnerability before IG110000.10 for DesignJet T790, T795, T1300, T2300, before MRY040500.5 for DesignJet T920, T930, T1500, T1530, T2500, T2530, before AENEAS030400.9 for DesignJet T3500, before NEXUS011200.11 for Latex 310, 330, 360, 370, before...

Updated golang packages fix security vulnerabilities

An arbitrary command execution flaw was found in the way Go's "go get" command handled the checkout of source code repositories. A remote attacker capable of hosting malicious repositories could potentially use this flaw to cause arbitrary command execution on the client side CVE-2017-15041. It w...

MGASA-2018-0089 Updated golang packages fix security vulnerabilities

An arbitrary command execution flaw was found in the way Go's "go get" command handled the checkout of source code repositories. A remote attacker capable of hosting malicious repositories could potentially use this flaw to cause arbitrary command execution on the client side CVE-2017-15041. It w...

Moderate: Red Hat Security Advisory: go-toolset-7 and go-toolset-7-golang security and bug fix update

An update for go-toolset-7 and go-toolset-7-golang is now available for Red Hat Developer Tools. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...