PT-2023-7550 · Unknown · Trace Mode

Name of the Vulnerable Software and Affected Versions: TRACE MODE affected versions not specified Description: The issue is related to the storage of unencrypted credentials in the SCADA system. Exploitation of this issue could allow an attacker to substitute a password hash from one user to...

SUSE CVE-2019-16543

Jenkins Spira Importer Plugin 3.2.2 and earlier stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

Jenkins Plugin GitHub Pull Request Coverage Status 安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. Jenkins Plugin GitHub Pul...

The vulnerability of the Form Manager component in the Firefox browser allows a hacker to disclose protected information.

The vulnerability of the Form Manager component in the Firefox browser is related to the unencrypted storage of user credentials. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

The vulnerability of the IBM Host Access Transformation Services (HATS) software, developed by IBM Host Access Beans, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the IBM Host Access Transformation Services HATS software, developed by IBM Host Access Beans, is related to the unencrypted storage of user credentials. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

PT-2022-6728 · Cisco · Cisco Duo Authentication Proxy

Name of the Vulnerable Software and Affected Versions: Cisco Duo Authentication Proxy affected versions not specified Description: A vulnerability in the logging component of Cisco Duo Authentication Proxy could allow an authenticated, remote attacker to view sensitive information in clear text o...

The vulnerability of software for centralized device management in the Zyxel Cloud network lies in the unencrypted storage of user credentials, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the software for centralized device management in the Zyxel Cloud network is related to the unencrypted storage of user credentials. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the /opt/axess/etc/default/axess software for network device centralized management in Zyxel Cloud CNM SecuManager allows a perpetrator to gain full access to devices in the network.

The vulnerability of the /opt/axess/etc/default/axess software for network device centralized management in Zyxel CloudCNM SecuManager lies in the unencrypted storage of user credentials. Exploiting this vulnerability could allow a malicious actor to gain full access to network devices remotely...

The vulnerability of Kubernets Rancher cluster management software, related to unencrypted storage of user data, allows a hacker to escalate their privileges.

The vulnerability of Kubernets Rancher cluster management software is related to the unencrypted storage of user credentials. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

Baxter Spectrum 安全漏洞

Baxter Spectrum is an infusion pump from Baxter USA. The Baxter Sigma and Baxter Spectrum Infusion Pumps have a security vulnerability that stems from the fact that they store network credentials and patient health information PHI in unencrypted form.PHI is stored using an automated program only ...

CVE-2022-20768

A vulnerability in the logging component of Cisco TelePresence Collaboration Endpoint CE and RoomOS Software could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. This vulnerability is due to the storage of certain unencrypted credentials...

CVE-2022-20768

A vulnerability in the logging component of Cisco TelePresence Collaboration Endpoint CE and RoomOS Software could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. This vulnerability is due to the storage of certain unencrypted credentials...

Design/Logic Flaw

A vulnerability in the logging component of Cisco TelePresence Collaboration Endpoint CE and RoomOS Software could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. This vulnerability is due to the storage of certain unencrypted credentials...

CVE-2022-20768 Cisco TelePresence Collaboration Endpoint and RoomOS Software Information Disclosure Vulnerability

A vulnerability in the logging component of Cisco TelePresence Collaboration Endpoint CE and RoomOS Software could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. This vulnerability is due to the storage of certain unencrypted credentials...

CVE-2022-20768 Cisco TelePresence Collaboration Endpoint and RoomOS Software Information Disclosure Vulnerability

A vulnerability in the logging component of Cisco TelePresence Collaboration Endpoint CE and RoomOS Software could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. This vulnerability is due to the storage of certain unencrypted credentials...

CVE-2022-20768

The CVE-2022-20768 entry concerns Cisco TelePresence Collaboration Endpoint (CE) and RoomOS Software. The core issue is a vulnerability in the logging component where unencrypted credentials can be stored, allowing an authenticated, remote attacker to access audit logs and obtain credentials that...

CVE-2022-20768

A vulnerability in the logging component of Cisco TelePresence Collaboration Endpoint CE and RoomOS Software could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. This vulnerability is due to the storage of certain unencrypted credentials...

Jenkins Plugin RocketChat Notifier 安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.An information disclosure vulnerability...

The vulnerability of the SecUsers.ini file of the controller display utility for OpenBSI allows a hacker to gain unauthorized access to protected information.

The vulnerability of the SecUsers.ini file of the controller display utility related to OpenBSI involves storing confidential information in an unencrypted form in memory. Exploiting this vulnerability could allow a remote attacker to gain access to the user credentials...

The vulnerability of the ResConf protocol implementation in STARDOM’s programmable logic controllers lies in the storage of account data in an unencrypted form, which allows a intruder to gain unauthorized access to the device.

The vulnerability of the ResConf protocol implementation in STARDOM’s programmable logic controllers involves the storage of credentials in an unencrypted form. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to the device...