CVE-2016-6092

CVE-2016-6092 affects IBM Security Key Lifecycle Manager (formerly Tivoli Key Lifecycle Manager). The vulnerability arises because the product stores user credentials in plaintext, enabling a local attacker to read passwords. Affected versions include IBM Security Key Lifecycle Manager v2.5 (2.5....

CVE-2016-6092

IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 stores user credentials in plain in clear text which can be read by a local user...

credmap v0.1 - The Credential Mapper

Credmap is an open source tool that was created to bring awareness to the dangers of credential reuse. It is capable of testing supplied user credentials on several known websites to test if the password has been reused on any of these. An official introductionary post can be found here . Help Me...

CVE-2016-9739

IBM Security Identity Manager Virtual Appliance stores user credentials in plain in clear text which can be read by a local user...

Design/Logic Flaw

IBM Security Identity Manager Virtual Appliance stores user credentials in plain in clear text which can be read by a local user...

CVE-2016-9739

IBM Security Identity Manager Virtual Appliance stores user credentials in plain in clear text which can be read by a local user...

CVE-2016-8967

IBM BigFix Inventory v9 9.2 stores user credentials in plain in clear text which can be read by a local user...

Code injection

IBM BigFix Inventory v9 9.2 stores user credentials in plain in clear text which can be read by a local user...

CVE-2016-8967

IBM BigFix Inventory v9 9.2 stores user credentials in plain in clear text which can be read by a local user...

CVE-2016-8967

IBM BigFix Inventory v9.2 (and IBM License Metric Tool v9) are affected by CVE-2016-8967, where user credentials are stored in clear text, enabling local read by an attacker with access to the system. The IBM Security Bulletin confirms the vulnerability and that a fix is tentatively planned for t...

CVE-2016-5950

IBM Kenexa LCMS Premier on Cloud stores user credentials in plain in clear text which can be read by an authenticated user...

Code injection

IBM Kenexa LCMS Premier on Cloud stores user credentials in plain in clear text which can be read by an authenticated user...

CVE-2016-5950

IBM Kenexa LCMS Premier on Cloud stores user credentials in plain in clear text which can be read by an authenticated user...

CVE-2016-5950

CVE-2016-5950 affects IBM Kenexa LCMS Premier on Cloud. The vulnerability is that credentials are stored in plain text and could be read by an authenticated user, exposing sensitive information. The incident is documented with a CVSS3.0 base score of 6.5 (C:H/I:N/A:N) and CVSS2.0 base score 4.0 (...

Advantech WebAccess 8.1 Post Authentication Credential Collector

This module allows you to log into Advantech WebAccess 8.1, and collect all of the credentials. Although authentication is required, any level of user permission can exploit this vulnerability. Note that 8.2 is not suitable for this. This module requires Metasploit: https://metasploit.com/downloa...

SentryHD 02.01.12e - Local Privilege Escalation

''' Exploit Title: SentryHD 02.01.12e Privilege Escalation Date: 18-01-2017 Software Link: http://www.minutemanups.com/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: local 1. Description Every user can read: c:\Program Files...

Error: The Citrix Broker Service failed to validate a user's credentials on an XML service

WhenDomain Pass-throughis configured, the following is seen in the event log for the StoreFront: Log Name:Application Source: Citrix Broker Service Date: 2/8/2017 7:31:58 AM Event ID: 2100 Task Category: None Level: Warning Keywords: User: NETWORK SERVICE Computer: VDA name Description: The Citri...

User Cannot Connect To Anonymous Store Without Username And Password.

Issue: User cannot connect to anonymous storewithout username and password. Steps To Reproduce The Issue on Receiver 4.4 Create a Store for Unauthenticated users in StoreFront 3.0. Confirm that Advertised is set toNo for this store Install Receiver 4.4. Add the Store URL for the Unauthenticated...

CVE-2016-4028

An issue was discovered in Open-Xchange OX Guard before 2.4.0-rev8. OX Guard uses an authentication token to identify and transfer guest users' credentials. The OX Guard API acts as a padding oracle by responding with different error codes depending on whether the provided token matches the...

Design/Logic Flaw

An issue was discovered in Open-Xchange OX Guard before 2.4.0-rev8. OX Guard uses an authentication token to identify and transfer guest users' credentials. The OX Guard API acts as a padding oracle by responding with different error codes depending on whether the provided token matches the...