CVE-2021-32997

The affected Baker Hughes Bentley Nevada products 3500 System 1 6.x, Part No. 3060/00 versions 6.98 and prior, 3500 System 1, Part No. 3071/xx & 3072/xx versions 21.1 HF1 and prior, 3500 Rack Configuration, Part No. 129133-01 versions 6.4 and prior, and 3500/22M Firmware, Part No. 288055-01...

CVE-2021-32997

The affected Baker Hughes Bentley Nevada products 3500 System 1 6.x, Part No. 3060/00 versions 6.98 and prior, 3500 System 1, Part No. 3071/xx & 3072/xx versions 21.1 HF1 and prior, 3500 Rack Configuration, Part No. 129133-01 versions 6.4 and prior, and 3500/22M Firmware, Part No. 288055-01...

Design/Logic Flaw

The affected Baker Hughes Bentley Nevada products 3500 System 1 6.x, Part No. 3060/00 versions 6.98 and prior, 3500 System 1, Part No. 3071/xx & 3072/xx versions 21.1 HF1 and prior, 3500 Rack Configuration, Part No. 129133-01 versions 6.4 and prior, and 3500/22M Firmware, Part No. 288055-01...

CVE-2021-32997 Baker Hughes Bently Nevada 3500 - Use of Password Hash with Insufficient Computational Effort

The affected Baker Hughes Bentley Nevada products 3500 System 1 6.x, Part No. 3060/00 versions 6.98 and prior, 3500 System 1, Part No. 3071/xx & 3072/xx versions 21.1 HF1 and prior, 3500 Rack Configuration, Part No. 129133-01 versions 6.4 and prior, and 3500/22M Firmware, Part No. 288055-01...

CVE-2021-32997

CVE-2021-32997 affects Baker Hughes Bently Nevada 3500 equipment. Affected products and versions include System 1 6.x (Part 3060/00, 6.98 and prior), System 1 (Part 3071/xx & 3072/xx, 21.1 HF1 and prior), 3500 Rack Configuration (Part 129133-01, 6.4 and prior), and 3500/22M Firmware (Part 288055-...

CVE-2021-32997 Baker Hughes Bently Nevada 3500 - Use of Password Hash with Insufficient Computational Effort

The affected Baker Hughes Bentley Nevada products 3500 System 1 6.x, Part No. 3060/00 versions 6.98 and prior, 3500 System 1, Part No. 3071/xx & 3072/xx versions 21.1 HF1 and prior, 3500 Rack Configuration, Part No. 129133-01 versions 6.4 and prior, and 3500/22M Firmware, Part No. 288055-01...

Authentication Bypass

pyjwt is vulnerable to authentication bypass. The vulnerability exists because the library permits an attacker submitting a JWT token to choose which algorithms are used when signing in, enabling non-blocklisted, but weak public key formats to be supported in the authentication process allowing a...

Weak Cryptography

io.github.javaezlib, JavaEZ is vulnerable to weak cryptography. The vulnerability exists in the unlockText function of Security.java due to weak encryption in the locked text which allows an unauthorized user to gain access to sensitive information in the system...

GHSA-QWGM-MXM4-3Q2C net-ldap has weak salt when generating passwords

The Ruby net-ldap gem before 0.16.2 uses a weak salt when generating SSHA passwords...

net-ldap has weak salt when generating passwords

The Ruby net-ldap gem before 0.16.2 uses a weak salt when generating SSHA passwords...

Incorrect Default Permissions in Beego

The File Session Manager in Beego before 1.12.2 allows local users to read session files because of weak permissions for individual files...

GHSA-HF4P-4J9R-3CVX Incorrect Default Permissions in Beego

The File Session Manager in Beego before 1.12.2 allows local users to read session files because of weak permissions for individual files...

GHSA-3C56-VX6V-Q5VH SaltStack Salt Allows creating certificates with weak file permissions

The TLS module within SaltStack Salt through 3002 creates certificates with weak file permissions...

SaltStack Salt Allows creating certificates with weak file permissions

The TLS module within SaltStack Salt through 3002 creates certificates with weak file permissions...

GHSA-CPCW-P965-WPQX rtslib-fb weak permissions for /etc/target/saveconfig.json file

Python rtslib-fb through 2.1.72 has weak permissions for /etc/target/saveconfig.json because shutil.copyfile instead of shutil.copy is used, and thus permissions are not preserved...

rtslib-fb weak permissions for /etc/target/saveconfig.json file

Python rtslib-fb through 2.1.72 has weak permissions for /etc/target/saveconfig.json because shutil.copyfile instead of shutil.copy is used, and thus permissions are not preserved...

GHSA-JXC4-W54C-QV5R Mattermost Server uses weak hashing for OAuth, email verification tokens and invitations

An issue was discovered in Mattermost Server before 3.8.2 and 3.7.5. Weak hashing was used for e-mail invitations, OAuth, and e-mail verification tokens...

Mattermost Server uses weak hashing for OAuth, email verification tokens and invitations

An issue was discovered in Mattermost Server before 3.8.2 and 3.7.5. Weak hashing was used for e-mail invitations, OAuth, and e-mail verification tokens...

Plone allows weak passwords

Missing password strength checks on some forms in Plone 4.3 through 5.2.0 allow users to set weak passwords, leading to easier cracking...

GHSA-HMCH-9947-82RJ Magento 2 Community Edition Weak Cryptography

Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 uses weak cryptographic function to store the failed login attempts for customer accounts...