Design/Logic Flaw

The Web application of Brocade Fabric OS before versions Brocade Fabric OS v9.0.1a and v8.2.3a contains debug statements that expose sensitive information to the program's standard output device. An attacker who has compromised the FOS system may utilize this weakness to capture sensitive...

CVE-2021-27789

The Web application of Brocade Fabric OS before versions Brocade Fabric OS v9.0.1a and v8.2.3a contains debug statements that expose sensitive information to the program's standard output device. An attacker who has compromised the FOS system may utilize this weakness to capture sensitive...

CVE-2021-39046

IBM Business Automation Workflow 18.0, 19.0, 20.0, and 21.0 and IBM Business Process Manager 8.5 and 8.6 stores user credentials in plain clear text which can be read by a lprivileged user. IBM X-Force ID: 214346...

Code injection

IBM Business Automation Workflow 18.0, 19.0, 20.0, and 21.0 and IBM Business Process Manager 8.5 and 8.6 stores user credentials in plain clear text which can be read by a lprivileged user. IBM X-Force ID: 214346...

CVE-2021-39046

IBM Business Automation Workflow 18.0, 19.0, 20.0, and 21.0 and IBM Business Process Manager 8.5 and 8.6 stores user credentials in plain clear text which can be read by a lprivileged user. IBM X-Force ID: 214346...

CVE-2021-39046

CVE-2021-39046 affects IBM Business Automation Workflow (versions 18.0–21.0) and IBM Business Process Manager (8.5–8.6). The root cause is information disclosure via plaintext storage of user credentials readable by a privileged user. IBM’s advisories and product bulletin confirm this vulnerabili...

PT-2022-9872

Name of the Vulnerable Software and Affected Versions Brocade Fabric OS versions prior to 9.0.1a Brocade Fabric OS versions prior to 8.2.3a Description The Web application of Brocade Fabric OS contains debug statements that expose sensitive information to the program's standard output device. An...

CVE-2021-27789: Undefined Security Weakness

The Web application of Brocade Fabric OS before versions Brocade Fabric OS v9.0.1a and v8.2.3a contains debug statements that expose sensitive information to the program's standard output device. An attacker who has compromised the FOS system may utilize this weakness to capture sensitive...

PT-2022-10864

Name of the Vulnerable Software and Affected Versions IBM Business Automation Workflow versions 18.0 through 21.0 IBM Business Process Manager versions 8.5 through 8.6 Description The issue allows user credentials to be stored in plain clear text, which can be read by a low-privileged user...

Security Bulletin: Information disclosure vulnerability affects IBM Business Automation Workflow and IBM Business Process Manager (BPM) - CVE-CVE-2021-39046

Summary IBM Business Process Manager and IBM Business Automation Workflow are vulnerable to an information disclosure attack. Vulnerability Details CVEID: CVE-2021-39046 DESCRIPTION: IBM Business Automation Workflow stores user credentials in plain clear text which can be read by a lprivileged...

CVE-2021-43590

Dell EMC Enterprise Storage Analytics for vRealize Operations, versions 4.0.1 to 6.2.1, contain a Plain-text password storage vulnerability. A local high privileged malicious user may potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may b...

CVE-2021-43590

Dell EMC Enterprise Storage Analytics for vRealize Operations, versions 4.0.1 to 6.2.1, contain a Plain-text password storage vulnerability. A local high privileged malicious user may potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may b...

CVE-2021-43590

Dell EMC Enterprise Storage Analytics for vRealize Operations (versions 4.0.1–6.2.1) stores passwords in plaintext, enabling a local high-privileged attacker to disclose certain user credentials and potentially access the vulnerable application with the compromised account’s privileges. The vulne...

Ansible discloses sensitive information in traceback error message

Ansible is an IT automation system that handles configuration management, application deployment, cloud provisioning, ad-hoc task execution, network automation, and multi-node orchestration. A flaw was found in Ansible Engine's ansible-connection module where sensitive information, such as the...

PT-2022-11872

Name of the Vulnerable Software and Affected Versions Dell EMC Enterprise Storage Analytics for vRealize Operations versions 4.0.1 through 6.2.1 Description The issue concerns a plain-text password storage vulnerability. A local high-privileged malicious user may potentially exploit this, leading...

CVE-2021-3620

A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such as the Ansible user credentials is disclosed by default in the traceback error message. The highest threat from this vulnerability is to confidentiality...

CVE-2021-3620

A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such as the Ansible user credentials is disclosed by default in the traceback error message. The highest threat from this vulnerability is to confidentiality...

CVE-2021-3620

A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such as the Ansible user credentials is disclosed by default in the traceback error message. The highest threat from this vulnerability is to confidentiality...

CVE-2021-3620

A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such as the Ansible user credentials is disclosed by default in the traceback error message. The highest threat from this vulnerability is to confidentiality...

Design/Logic Flaw

In DCE/RPC it is possible to share the handles cookies for resource state between multiple connections via a mechanism called 'association groups'. These handles can reference connections to our sam.ldb database. However while the database was correctly shared, the user credentials state was only...