PT-2025-52464

Уязвимость платформы для построения систем автоматизации R9, связанная с хранением аутентификационных данных в файлах конфигурации в незашифрованном виде. Эксплуатация уязвимости может позволить нарушителю получить несанкционированный доступ к системе...

CVE-2019-5448

Yarn before 1.17.3 is vulnerable to Missing Encryption of Sensitive Data due to HTTP URLs in lockfile causing unencrypted authentication data to be sent over the network...

CVE-2019-5448

Yarn before 1.17.3 is vulnerable to Missing Encryption of Sensitive Data due to HTTP URLs in lockfile causing unencrypted authentication data to be sent over the network...

CVE-2019-5448

CVE-2019-5448 affects Yarn; the vulnerability arises from HTTP URLs in a Yarn lockfile that can cause unencrypted authentication data to be transmitted. The connected advisories confirm Photon OS and Nessus plugins flag Yarn as affected and advise updating the Yarn package to mitigate. The exact ...

PT-2019-17677

Name of the Vulnerable Software and Affected Versions Yarn versions prior to 1.17.3 Description The issue is related to missing encryption of sensitive data. Specifically, HTTP URLs in the lockfile cause unencrypted authentication data to be sent over the network. Recommendations For versions pri...

CVE-2019-5448: Missing Encryption of Sensitive Data

Yarn before 1.17.3 is vulnerable to Missing Encryption of Sensitive Data due to HTTP URLs in lockfile causing unencrypted authentication data to be sent over the network...