CVE-2019-13420

CVE-2019-13420 affects floragunn Search Guard (Elasticsearch/ELK plugin) prior to version 21.0. The vulnerability is a timing side-channel in the internal user database, which could leak information and impact confidentiality. The detail provided specifies the root cause as a timing discrepancy w...

CVE-2019-13420: Observable Timing Discrepancy

Search Guard versions before 21.0 had an timing side channel issue when using the internal user database...

PT-2019-13332

Name of the Vulnerable Software and Affected Versions Search Guard versions prior to 21.0 Description The issue is related to a timing side channel problem that occurs when the internal user database is used. Recommendations For versions prior to 21.0, update to version 21.0 or later to resolve t...

Brocade Network Advisor Vulnerabilities - Lenovo Support US

No description provided...

Privilege Escalation

jenkins is vulnerable to privilege escalation. Access to reserved names are not restricted in the HudsonPrivateSecurityRealm class when using jenkins' user database, which allows remote attackers to gain privileges by creating a reserved name...

Default credentials

A Vulnerability in Brocade Network Advisor versions before 14.0.3 could allow a remote unauthenticated attacker to export the current user database which includes the encrypted not hashed password of the systems. The attacker could gain access to the Brocade Network Advisor System after...

CVE-2018-6445

A Vulnerability in Brocade Network Advisor versions before 14.0.3 could allow a remote unauthenticated attacker to export the current user database which includes the encrypted not hashed password of the systems. The attacker could gain access to the Brocade Network Advisor System after...

CVE-2018-6445

A Vulnerability in Brocade Network Advisor versions before 14.0.3 could allow a remote unauthenticated attacker to export the current user database which includes the encrypted not hashed password of the systems. The attacker could gain access to the Brocade Network Advisor System after...

PT-2019-11024

Name of the Vulnerable Software and Affected Versions: Brocade Network Advisor versions prior to 14.0.3 Description: A remote unauthenticated attacker could export the current user database, which includes encrypted passwords of the system. The attacker could gain access to the Brocade Network...

CVE-2018-1000408

A denial of service vulnerability exists in Jenkins 2.145 and earlier, LTS 2.138.1 and earlier in core/src/main/java/hudson/security/HudsonPrivateSecurityRealm.java that allows attackers without Overall/Read permission to access a specific URL on instances using the built-in Jenkins user database...

CVE-2018-1000408

A denial of service vulnerability exists in Jenkins 2.145 and earlier, LTS 2.138.1 and earlier in core/src/main/java/hudson/security/HudsonPrivateSecurityRealm.java that allows attackers without Overall/Read permission to access a specific URL on instances using the built-in Jenkins user database...

CVE-2018-1000408

CVE-2018-1000408 describes a denial-of-service vulnerability in Jenkins where, on builds using the built-in Jenkins user database (HudsonPrivateSecurityRealm), an attacker without Overall/Read permission can access a specific URL, causing an ephemeral user record to be created in memory. Affected...

PT-2019-8719

Name of the Vulnerable Software and Affected Versions Jenkins versions 2.145 and earlier Jenkins LTS versions 2.138.1 and earlier Description A denial of service issue exists that allows attackers without Overall/Read permission to access a specific URL on instances using the built-in Jenkins use...

BSA-2018-746

Security Advisory ID : BSA-2018-746 Component : Servlet Revision : 1.0: Initial A Vulnerability in Brocade Network Advisor Version before 14.0.3 could allow a remote unauthenticated attacker to export the current user database which includes the encypted not hashed password of the systems. The...

Open redirect

Open Dental before version 18.4 transmits the entire user database over the network when a remote unauthenticated user accesses the command prompt. This allows the attacker to gain access to usernames, password hashes, privilege levels, and more...

CVE-2018-15718

Open Dental before version 18.4 transmits the entire user database over the network when a remote unauthenticated user accesses the command prompt. This allows the attacker to gain access to usernames, password hashes, privilege levels, and more...

CVE-2018-15718

Open Dental before version 18.4 transmits the entire user database over the network when a remote unauthenticated user accesses the command prompt. This allows the attacker to gain access to usernames, password hashes, privilege levels, and more...

CVE-2018-15718

Open Dental before version 18.4 transmits the entire user database over the network when a remote unauthenticated user accesses the command prompt. This allows the attacker to gain access to usernames, password hashes, privilege levels, and more...

CVE-2018-15718

Open Dental prior to version 18.4 is affected by CVE-2018-15718. The issue occurs when a remote unauthenticated user accesses the command prompt, causing the application to transmit the entire user database over the network. This can expose usernames, password hashes, privilege levels, and other ...

PT-2018-13168

Name of the Vulnerable Software and Affected Versions Open Dental versions prior to 18.4 Description The issue allows an unauthenticated remote user to access the command prompt, resulting in the transmission of the entire user database over the network. This exposes sensitive information,...