2007 matches found
The vulnerability of the SolarWinds Virtualization Manager software allows a hacker to gain access to user passwords.
The vulnerability of the SolarWinds Virtualization Manager software exists due to weak encryption for password storage. Exploiting this vulnerability could allow a malicious individual, operating locally, to gain access to user passwords using brute-force methods...
Authentication Bypass Vulnerability in Multiple Moxa Products
Moxa MGate MB3180 and others are gateway products from Moxa. A security vulnerability exists in a number of Moxa products that stems from the program's use of weak encryption algorithms. A remote attacker could exploit this vulnerability by performing a brute force exploit to bypass authenticatio...
CVE-2016-5804
Moxa MGate MB3180 before 1.8, MGate MB3280 before 2.7, MGate MB3480 before 2.6, MGate MB3170 before 2.5, and MGate MB3270 before 2.7 use weak encryption, which allows remote attackers to bypass authentication via a brute-force series of guesses for a parameter value...
CVE-2016-5804
Moxa MGate MB3180 before 1.8, MGate MB3280 before 2.7, MGate MB3480 before 2.6, MGate MB3170 before 2.5, and MGate MB3270 before 2.7 use weak encryption, which allows remote attackers to bypass authentication via a brute-force series of guesses for a parameter value...
CVE-2016-5804
The CVE-2016-5804 issue affects Moxa MGate MB3180 (before 1.8), MB3280 (before 2.7), MB3480 (before 2.6), MB3170 (before 2.5), and MB3270 (before 2.7). Root cause: weak encryption allowing brute-force guessing of a parameter value to bypass authentication, enabling remote login. Impact: remote au...
CVE-2016-5804: Inadequate Encryption Strength
Moxa MGate MB3180 before 1.8, MGate MB3280 before 2.7, MGate MB3480 before 2.6, MGate MB3170 before 2.5, and MGate MB3270 before 2.7 use weak encryption, which allows remote attackers to bypass authentication via a brute-force series of guesses for a parameter value...
PT-2016-6689
Name of the Vulnerable Software and Affected Versions Moxa MGate MB3180 versions 1.8 and earlier Moxa MGate MB3280 versions 2.7 and earlier Moxa MGate MB3480 versions 2.6 and earlier Moxa MGate MB3170 versions 2.5 and earlier Moxa MGate MB3270 versions 2.7 and earlier Description The issue allows...
IBM Security Privileged Identity Manager Virtual Appliance Sensitive Information Access Vulnerability
IBM Security Privileged Identity Manager is an identity management product within IBM Identity Governance and Management, an identity governance solution from IBM USA, that protects, automates, and audits the use of privileged identities to help defend against insider threats and improve security...
The vulnerability of the Linter Bastion database management system allows a malicious individual to decode administrator login credentials.
By default, user passwords in the Linter Bastion Database Management System are encrypted using a less reliable encryption algorithm. The recovery of the password from the encrypted text takes less than a second. For example, in the “3.11” file, with an offset of 4203, the Linter Bastion Database...
CVE-2016-2861
IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3, 7.1.1 before 7.1.1.1, 8.5 before 8.5.0.3, and 8.6 before 8.6.0.8 does not properly encrypt data, which makes it easier for remote attackers to obtain sensitive information by sniffing the network...
Security Advisory - Weak Encryption Vulnerability in the OceanStor ReplicationDirector
OceanStor ReplicationDirector is designed to manage disaster recovery DR service of data centers DC for enterprises. Huawei OceanStor ReplicationDirector has weak encryption vulnerability. An attacker may exploit it to craft server certificate signatures. Vulnerability ID: HWPSIRT-2016-05156 Huaw...
CVE-2016-5709
SolarWinds Virtualization Manager 6.3.1 and earlier uses weak encryption to store passwords in /etc/shadow, which allows local users with superuser privileges to obtain user passwords via a brute force attack...
CVE-2016-5709
SolarWinds Virtualization Manager 6.3.1 and earlier uses weak encryption to store passwords in /etc/shadow, which allows local users with superuser privileges to obtain user passwords via a brute force attack...
Sql injection
SolarWinds Virtualization Manager 6.3.1 and earlier uses weak encryption to store passwords in /etc/shadow, which allows local users with superuser privileges to obtain user passwords via a brute force attack...
CVE-2016-5709
SolarWinds Virtualization Manager 6.3.1 and earlier uses weak encryption to store passwords in /etc/shadow, which allows local users with superuser privileges to obtain user passwords via a brute force attack...
CVE-2016-5709
CVE-2016-5709 affects SolarWinds Virtualization Manager 6.3.1 and earlier. The root cause is weak encryption of passwords stored in /etc/shadow, enabling a local attacker with superuser privileges to brute-force and obtain user passwords. Documented impact is local, with partial confidentiality e...
CVE-2016-5709: Exposure of Sensitive Information to an Unauthorized Actor
SolarWinds Virtualization Manager 6.3.1 and earlier uses weak encryption to store passwords in /etc/shadow, which allows local users with superuser privileges to obtain user passwords via a brute force attack...
PT-2016-2288
Name of the Vulnerable Software and Affected Versions SolarWinds Virtualization Manager versions 6.3.1 and earlier Description The issue exists due to weak encryption used for storing passwords. This allows a local attacker to obtain user passwords using a brute force attack. The estimated number...
Solarwinds Virtualization Manager Information Disclosure Vulnerability
Solarwinds Virtualization Manager is a suite of software from SolarWinds, Inc. that is used to manage and monitor virtualization products. The software provides capacity management, performance monitoring, and configuration management. A security vulnerability exists in Solarwinds Virtualization...
