CVE-2023-50776

Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier stores PaaSLane authentication tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...

CVE-2023-50772

Jenkins Dingding JSON Pusher Plugin 2.0 and earlier stores access tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...

CVE-2023-50772

Jenkins Dingding JSON Pusher Plugin 2.0 and earlier stores access tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...

Design/Logic Flaw

Jenkins Dingding JSON Pusher Plugin 2.0 and earlier stores access tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...

Authentication flaw

Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier stores PaaSLane authentication tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...

CVE-2023-50776

CVE-2023-50776 affects Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier. The vulnerability arises from storing PaaSLane authentication tokens unencrypted in job config.xml files on the Jenkins controller, enabling visibility to users with Item/Extended Read permission or someone with filesystem...

CVE-2023-50776

Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier stores PaaSLane authentication tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...

CVE-2023-50772

CVE-2023-50772 affects the Jenkins Dingding JSON Pusher Plugin 2.0 and earlier. The issue is that access tokens are stored unencrypted in job config.xml files on the Jenkins controller, enabling viewing by users with Item/Extended Read permission or access to the controller file system. The conne...

CVE-2023-50772

Jenkins Dingding JSON Pusher Plugin 2.0 and earlier stores access tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...

CVE-2023-50772

Jenkins Dingding JSON Pusher Plugin 2.0 and earlier stores access tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...

Jenkins PaaSLane Estimate Plugin Security Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

The vulnerability of the TRACE MODE SCADA system, related to unencrypted storage of user credentials, allows a hacker to replace one user’s password hash with another and gain access to the SCADA system.

The vulnerability of the TRACE MODE SCADA system is related to the unencrypted storage of user credentials. Exploiting this vulnerability could allow a perpetrator to replace the password hash for one user with that of another user and gain access to the SCADA system...

The vulnerability of ASUS RT-AC66U router’s microprogramming software, related to the transmission of credentials in an unencrypted form, allows a hacker to disclose the protected information.

The vulnerability of ASUS RT-AC66U router’s microprogramming software is related to the transmission of credentials in an unencrypted form. Exploiting this vulnerability can allow a remote attacker to disclose the protected information...

The vulnerability of the SCADA system TRACE MODE, related to unencrypted storage of user credentials, allows a intruder to alter user permissions.

The vulnerability of the SCADA system TRACE MODE is related to the unencrypted storage of user credentials. Exploiting this vulnerability can allow a intruder to alter user permissions in such a way that higher privileges are granted to the desired user...

The vulnerability of the H2 database management system’s web interface allows attackers to escalate their privileges.

The vulnerability of the H2.svz database management system’s web interface relates to the unencrypted storage of confidential information. Exploiting this vulnerability can allow attackers to enhance their privileges...

Code injection

The affected devices transmit sensitive information unencrypted allowing a remote unauthenticated attacker to capture and modify network traffic...

CVE-2023-39172

CVE-2023-39172 affects SENEC ENBW Legacy Storage Box series (V1, V2, V3). The root cause is that the devices transmit sensitive information unencrypted over the network, enabling a remote unauthenticated attacker to capture and modify traffic. The NVD entry assigns a CRITICAL CVSS v3.1 score (9.1...

CVE-2023-39172 SENEC: Storage Box V1,V2 and V3 transmitting sensitive data unencrypted

The affected devices transmit sensitive information unencrypted allowing a remote unauthenticated attacker to capture and modify network traffic...

PT-2023-26827 · Senec +1 · Storage Box V1 +3

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue allows a remote unauthenticated attacker to capture and modify network traffic because sensitive information is transmitted unencrypted. Recommendations: At the moment, there is ...

EnBw SENEC Legacy Storage Box Security Vulnerability

The EnBw SENEC Legacy Storage Box is a series of storage boxes from German company EnBw. A security vulnerability exists in EnBw SENEC Legacy Storage Box versions V1, V2, and V3, which stems from the affected devices transmitting unencrypted sensitive information, and can be exploited by an...