ZTE ZXCLOUD GoldenData VAP Information Disclosure Vulnerability (CNVD-2020-00218)

ZTE ZXCLOUD GoldenData VAP is a set of big data solutions from ZTE Corporation ZTE, China. An information disclosure vulnerability exists in ZTE ZXCLOUD GoldenData VAP versions prior to 4.01.01.02. The vulnerability stems from errors in configuration and other errors in the network system or...

CVE-2019-3429

All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have a file reading vulnerability. Attackers could obtain log file information without authorization, causing the disclosure of sensitive information...

CVE-2019-3431

All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have encryption problems vulnerability. Attackers could sniff unencrypted account and password through the network for front-end system access...

CVE-2019-3431

All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have encryption problems vulnerability. Attackers could sniff unencrypted account and password through the network for front-end system access...

CVE-2019-3430

All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have an information disclosure vulnerability. Attackers could use this vulnerability to collect data information and damage the system...

Authorization

All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have a file reading vulnerability. Attackers could obtain log file information without authorization, causing the disclosure of sensitive information...

Information disclosure

All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have an information disclosure vulnerability. Attackers could use this vulnerability to collect data information and damage the system...

Design/Logic Flaw

All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have encryption problems vulnerability. Attackers could sniff unencrypted account and password through the network for front-end system access...

CVE-2019-3431

All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have encryption problems vulnerability. Attackers could sniff unencrypted account and password through the network for front-end system access...

CVE-2019-3431

The CVE-2019-3431 entry concerns ZTE ZXCLOUD GoldenData VAP: all versions up to 4.01.01.02 expose encryption problems that allow an attacker to sniff unencrypted accounts and passwords over the network to access the front-end system. The connected Red Hat/RedPrivacy/CNVD/NVD entries corroborate t...

CVE-2019-3430

All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have an information disclosure vulnerability. Attackers could use this vulnerability to collect data information and damage the system...

CVE-2019-3430

CVE-2019-3430 affects ZTE ZXCLOUD GoldenData VAP before version 4.01.01.02. All connected documents describe an information disclosure vulnerability that could allow an attacker to obtain sensitive data and potentially damage the system. The CNVD and RH Red Hat entries confirm the affected produc...

CVE-2019-3429

CVE-2019-3429 affects ZTE ZXCLOUD GoldenData VAP, with all versions prior to 4.01.01.02 vulnerable to a file-read vulnerability that allows an attacker to obtain log file information and disclose sensitive data. The linked sources consistently identify the affected product and version boundary (p...

CVE-2019-3429

All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have a file reading vulnerability. Attackers could obtain log file information without authorization, causing the disclosure of sensitive information...

PT-2019-16582

Name of the Vulnerable Software and Affected Versions ZTE ZXCLOUD GoldenData VAP versions prior to V4.01.01.02 Description The issue allows attackers to collect data information and potentially damage the system due to an information disclosure vulnerability. Recommendations For versions prior to...

PT-2019-16583

Name of the Vulnerable Software and Affected Versions ZTE ZXCLOUD GoldenData VAP product versions prior to V4.01.01.02 Description The issue concerns encryption problems, allowing attackers to intercept unencrypted account and password information through the network, potentially gaining access t...

CVE-2019-3430: Undefined Security Weakness

All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have an information disclosure vulnerability. Attackers could use this vulnerability to collect data information and damage the system...

CVE-2019-3429: Insertion of Sensitive Information into Log File

All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have a file reading vulnerability. Attackers could obtain log file information without authorization, causing the disclosure of sensitive information...

CVE-2019-3431: Missing Encryption of Sensitive Data

All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have encryption problems vulnerability. Attackers could sniff unencrypted account and password through the network for front-end system access...

PT-2019-16581

Name of the Vulnerable Software and Affected Versions ZTE ZXCLOUD GoldenData VAP product versions prior to V4.01.01.02 Description The issue allows attackers to obtain log file information without authorization, potentially leading to the disclosure of sensitive information. Recommendations For...