deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-26231
Published: 2020-11-23
Description: October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework. A bypass of CVE-2020-15247 (fixed in 1.0.469 and 1.1.0) was discovered that has the same impact as CVE-2020-15247. An authenticated backend user with the cms.manage_pages, cms.manage_layouts, or cms.manage_partials permissions who would normally not be permitted to provide PHP code to be executed by the CMS due to cms.enableSafeMode being enabled is able to write specific Twig code to escape the Twig sandbox and execute arbitrary PHP. This is not a problem for anyone that trusts their users with those permissions to normally write & manage PHP within the CMS by not having cms.enableSafeMode enabled, but would be a problem for anyone relying on cms.enableSafeMode to ensure that users with those permissions in production do not have access to write & execute arbitrary PHP. Issue has been patched in Build 470 (v1.0.470) and v1.1.1.
CVSS Score: 5.2 (MEDIUM)
CWE: CWE-862
References: https://github.com/octobercms/october/commit/d34fb8ab51108495a9a651b841202d935f4e12f7; https://github.com/octobercms/october/security/advisories/GHSA-r89v-cgv7-3jhx; https://github.com/octobercms/october/commit/d34fb8ab51108495a9a651b841202d935f4e12f7
CVE: CVE-2020-28360
Published: 2020-11-23
Description: Insufficient RegEx in private-ip npm package v1.0.5 and below insufficiently filters reserved IP ranges resulting in indeterminate SSRF. An attacker can perform a large range of requests to ARIN reserved IP ranges, resulting in an indeterminable number of critical attack vectors, allowing remote attackers to request server-side resources or potentially execute arbitrary code through various SSRF techniques.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918
References: https://github.com/frenchbread/private-ip; https://www.npmjs.com/package/private-ip; https://github.com/frenchbread/private-ip
CVE: CVE-2020-25660
Published: 2020-11-23
Description: A flaw was found in the Cephx authentication protocol in versions before 15.2.6 and before 14.2.14, where it does not verify Ceph clients correctly and is then vulnerable to replay attacks in Nautilus. This flaw allows an attacker with access to the Ceph cluster network to authenticate with the Ceph service via a packet sniffer and perform actions allowed by the Ceph service. This issue is a reintroduction of CVE-2018-1128, affecting the msgr2 protocol. The msgr 2 protocol is used for all communication except older clients that do not support the msgr2 protocol. The msgr1 protocol is not affected. The highest threat from this vulnerability is to confidentiality, integrity, and system availability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-294, CWE-294
References: https://bugzilla.redhat.com/show_bug.cgi?id=1890354; https://ceph.io/community/v15-2-6-octopus-released/; https://ceph.io/releases/v14-2-14-nautilus-released/
CVE: CVE-2020-25688
Published: 2020-11-23
Description: A flaw was found in rhacm versions before 2.0.5 and before 2.1.0. Two internal service APIs were incorrectly provisioned using a test certificate from the source repository. This would result in all installations using the same certificates. If an attacker could observe network traffic internal to a cluster, they could use the private key to decode API requests that should be protected by TLS sessions, potentially obtaining information they would not otherwise be able to. These certificates are not used for service authentication, so no opportunity for impersonation or active MITM attacks were made possible.
CVSS Score: 3.5 (LOW)
CWE: CWE-321, CWE-798
References: https://bugzilla.redhat.com/show_bug.cgi?id=1892551; https://bugzilla.redhat.com/show_bug.cgi?id=1892551
CVE: CVE-2020-25696
Published: 2020-11-23
Description: A flaw was found in the psql interactive terminal of PostgreSQL in versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. If an interactive psql session uses \gset when querying a compromised server, the attacker can execute arbitrary code as the operating system account running psql. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-183, CWE-697
References: https://bugzilla.redhat.com/show_bug.cgi?id=1894430; https://lists.debian.org/debian-lts-announce/2020/12/msg00005.html; https://security.gentoo.org/glsa/202012-07
CVE: CVE-2020-26229
Published: 2020-11-23
Description: TYPO3 is an open source PHP based web content management system. In TYPO3 from version 10.4.0, and before version 10.4.10, RSS widgets are susceptible to XML external entity processing. This vulnerability is reasonable, but is theoretical - it was not possible to actually reproduce the vulnerability with current PHP versions of supported and maintained system distributions. At least with libxml2 version 2.9, the processing of XML external entities is disabled per default - and cannot be exploited. Besides that, a valid backend user account is needed. Update to TYPO3 version 10.4.10 to fix the problem described.
CVSS Score: 3.7 (LOW)
CWE: CWE-611
References: https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-q9cp-mc96-m4w2; https://typo3.org/security/advisory/typo3-core-sa-2020-012; https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-q9cp-mc96-m4w2
CVE: CVE-2020-28984
Published: 2020-11-23
Description: prive/formulaires/configurer_preferences.php in SPIP before 3.2.8 does not properly validate the couleur, display, display_navigation, display_outils, imessage, and spip_ecran parameters.
CVSS Score: 9.8 (CRITICAL)
References: https://git.spip.net/spip/spip/commit/ae4267eba1022dabc12831ddb021c5d6e09040f8; https://git.spip.net/spip/spip/compare/v3.2.7...v3.2.8; https://lists.debian.org/debian-lts-announce/2020/12/msg00036.html
CVE: CVE-2020-4006
Published: 2020-11-23
Description: VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector address have a command injection vulnerability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://www.vmware.com/security/advisories/VMSA-2020-0027.html; https://www.kb.cert.org/vuls/id/724367; https://www.vmware.com/security/advisories/VMSA-2020-0027.html
CVE: CVE-2020-28991
Published: 2020-11-24
Description: Gitea 0.9.99 through 1.12.x before 1.12.6 does not prevent a git protocol path that specifies a TCP port number and also contains newlines (with URL encoding) in ParseRemoteAddr in modules/auth/repo_form.go.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/go-gitea/gitea/pull/13525; https://github.com/go-gitea/gitea/releases/tag/v1.12.6; https://github.com/go-gitea/gitea/pull/13525
CVE: CVE-2020-15928
Published: 2020-11-24
Description: In Ortus TestBox 2.4.0 through 4.1.0, unvalidated query string parameters to test-browser/index.cfm allow directory traversal.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://www.exploit-db.com/exploits/49078; https://www.exploit-db.com/exploits/49078
CVE: CVE-2020-15929
Published: 2020-11-24
Description: In Ortus TestBox 2.4.0 through 4.1.0, unvalidated query string parameters passed to system/runners/HTMLRunner.cfm allow an attacker to write an arbitrary CFM file (within the application's context) containing attacker-defined CFML tags, leading to Remote Code Execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://www.exploit-db.com/exploits/49077; https://www.exploit-db.com/exploits/49077
CVE: CVE-2020-26890
Published: 2020-11-24
Description: Matrix Synapse before 1.20.0 erroneously permits non-standard NaN, Infinity, and -Infinity JSON values in fields of m.room.member events, allowing remote attackers to execute a denial of service attack against the federation and common Matrix clients. If such a malformed event is accepted into the room's state, the impact is long-lasting and is not fixed by an upgrade to a newer version, requiring the event to be manually redacted instead. Since events are replicated to servers of other room members, the impact is not constrained to the server of the event sender.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://github.com/matrix-org/synapse/security/advisories/GHSA-4mp3-385r-v63f; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G7YXMMYQP46PYL664JQUXCA3LPBJU7DQ/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U34DPP4ZLOEDUY2ZCWOHQPU5GA5LYNUQ/
CVE: CVE-2020-28348
Published: 2020-11-24
Description: HashiCorp Nomad and Nomad Enterprise 0.9.0 up to 0.12.7 client Docker file sandbox feature may be subverted when not explicitly disabled or when using a volume mount type. Fixed in 0.12.8, 0.11.7, and 0.10.8.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://github.com/hashicorp/nomad/blob/master/CHANGELOG.md#0128-november-10-2020; https://github.com/hashicorp/nomad/issues/9303; https://github.com/hashicorp/nomad/blob/master/CHANGELOG.md#0128-november-10-2020
CVE: CVE-2020-29002
Published: 2020-11-24
Description: includes/CologneBlueTemplate.php in the CologneBlue skin for MediaWiki through 1.35 allows XSS via a qbfind message supplied by an administrator.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://gerrit.wikimedia.org/r/q/Ie798a4f16d0ac2a4871aefeb593d962966aeb6b0; https://phabricator.wikimedia.org/T267278; https://gerrit.wikimedia.org/r/q/Ie798a4f16d0ac2a4871aefeb593d962966aeb6b0
CVE: CVE-2020-29003
Published: 2020-11-24
Description: The PollNY extension for MediaWiki through 1.35 allows XSS via an answer option for a poll question, entered during Special:CreatePoll or Special:UpdatePoll.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://phabricator.wikimedia.org/T266508; https://phabricator.wikimedia.org/T266508
CVE: CVE-2020-5641
Published: 2020-11-24
Description: Cross-site request forgery (CSRF) vulnerability in GS108Ev3 firmware version 2.06.10 and earlier allows remote attackers to hijack the authentication of administrators and the product's settings may be changed without the user's intention or consent via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://jvn.jp/en/jp/JVN27806339/index.html; https://kb.netgear.com/000062496/GS108Ev3-Firmware-Version-2-06-14; https://jvn.jp/en/jp/JVN27806339/index.html
CVE: CVE-2020-5674
Published: 2020-11-24
Description: Untrusted search path vulnerability in the installers of multiple SEIKO EPSON products allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://jvn.jp/en/jp/JVN26835001/index.html; https://www.epson.jp/support/misc_t/201119_oshirase.htm; https://www.epson.jp/support/pdf/fy20-001_softwareList_20201106_b.pdf
CVE: CVE-2019-20925
Published: 2020-11-24
Description: An unauthenticated client can trigger denial of service by issuing specially crafted wire protocol messages, which cause the message decompressor to incorrectly allocate memory. This issue affects MongoDB Server v4.2 versions prior to 4.2.1; MongoDB Server v4.0 versions prior to 4.0.13; MongoDB Server v3.6 versions prior to 3.6.15 and MongoDB Server v3.4 versions prior to 3.4.24.
CVSS Score: 7.5 (HIGH)
CWE: CWE-839, CWE-697
References: https://jira.mongodb.org/browse/SERVER-43751; https://jira.mongodb.org/browse/SERVER-43751
CVE: CVE-2020-25472
Published: 2020-11-24
Description: SimplePHPscripts News Script PHP Pro 2.3 is affected by a Cross Site Request Forgery (CSRF) vulnerability, which allows attackers to add new users.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://news.websec.nl; https://websec.nl; https://www.linkedin.com/feed/update/urn:li:activity:[PII_REDACTED]850122752
CVE: CVE-2020-25473
Published: 2020-11-24
Description: SimplePHPscripts News Script PHP Pro 2.3 does not properly set the HttpOnly Flag from Session Cookies.
CVSS Score: 6.5 (MEDIUM)
References: https://news.websec.nl/; https://websec.nl/; https://www.linkedin.com/feed/update/urn:li:activity:[PII_REDACTED]850122752
CVE: CVE-2020-25474
Published: 2020-11-24
Description: SimplePHPscripts News Script PHP Pro 2.3 is affected by a Cross Site Scripting (XSS) vulnerability via the editor_name parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://news.websec.nl; https://websec.nl; https://www.linkedin.com/feed/update/urn:li:activity:[PII_REDACTED]850122752
CVE: CVE-2020-25475
Published: 2020-11-24
Description: SimplePHPscripts News Script PHP Pro 2.3 is affected by a SQL Injection via the id parameter in an editNews action.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://websec.nl/; https://www.linkedin.com/feed/update/urn:li:activity:[PII_REDACTED]850122752; https://websec.nl/
CVE: CVE-2020-29006
Published: 2020-11-24
Description: MISP before 2.4.135 lacks an ACL check, related to app/Controller/GalaxyElementsController.php and app/Model/GalaxyElement.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862
References: https://github.com/MISP/MISP/commit/423750573d07f1a463f115ef37182c1825080da4; https://github.com/MISP/MISP/compare/v2.4.134...v2.4.135; https://github.com/MISP/MISP/commit/423750573d07f1a463f115ef37182c1825080da4
CVE: CVE-2020-3984
Published: 2020-11-24
Description: The SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3 and 3.4.x prior to 3.4.4 does not apply correct input validation which allows for SQL-injection. An authenticated SD-WAN Orchestrator user may exploit a vulnerable API call using specially crafted SQL queries which may lead to unauthorized data access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://www.vmware.com/security/advisories/VMSA-2020-0025.html; http://www.vmware.com/security/advisories/VMSA-2020-0025.html
CVE: CVE-2020-3985
Published: 2020-11-24
Description: The SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3 and 3.4.x prior to 3.4.4 allows an access to set arbitrary authorization levels leading to a privilege escalation issue. An authenticated SD-WAN Orchestrator user may exploit an application weakness and call a vulnerable API to elevate their privileges.
CVSS Score: 8.8 (HIGH)
References: http://www.vmware.com/security/advisories/VMSA-2020-0025.html; http://www.vmware.com/security/advisories/VMSA-2020-0025.html
CVE: CVE-2020-4000
Published: 2020-11-24
Description: The SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3, 3.4.x prior to 3.4.4, and 4.0.x prior to 4.0.1 allows for executing files through directory traversal. An authenticated SD-WAN Orchestrator user is able to traversal directories which may lead to code execution of files.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: http://www.vmware.com/security/advisories/VMSA-2020-0025.html; http://www.vmware.com/security/advisories/VMSA-2020-0025.html
CVE: CVE-2020-4001
Published: 2020-11-24
Description: The SD-WAN Orchestrator 3.3.2, 3.4.x, and 4.0.x has default passwords allowing for a Pass-the-Hash Attack. SD-WAN Orchestrator ships with default passwords for predefined accounts which may lead to to a Pass-the-Hash attack.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1188
References: http://www.vmware.com/security/advisories/VMSA-2020-0025.html; http://www.vmware.com/security/advisories/VMSA-2020-0025.html
CVE: CVE-2020-4002
Published: 2020-11-24
Description: The SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3, 3.4.x prior to 3.4.4, and 4.0.x prior to 4.0.1 handles system parameters in an insecure way. An authenticated SD-WAN Orchestrator user with high privileges may be able to execute arbitrary code on the underlying operating system.
CVSS Score: 7.2 (HIGH)
References: http://www.vmware.com/security/advisories/VMSA-2020-0025.html; http://www.vmware.com/security/advisories/VMSA-2020-0025.html
CVE: CVE-2020-4003
Published: 2020-11-24
Description: VMware SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3, 3.4.x prior to 3.4.4, and 4.0.x prior to 4.0.1 was found to be vulnerable to SQL-injection attacks allowing for potential information disclosure. An authenticated SD-WAN Orchestrator user may inject code into SQL queries which may lead to information disclosure.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://www.vmware.com/security/advisories/VMSA-2020-0025.html; http://www.vmware.com/security/advisories/VMSA-2020-0025.html
CVE: CVE-2020-10762
Published: 2020-11-24
Description: An information-disclosure flaw was found in the way that gluster-block before 0.5.1 logs the output from gluster-block CLI operations. This includes recording passwords to the cmd_history.log file which is world-readable. This flaw allows local users to obtain sensitive information by reading the log file. The highest threat from this vulnerability is to data confidentiality.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-732, CWE-532
References: https://bugzilla.redhat.com/show_bug.cgi?id=1845067; https://github.com/gluster/gluster-block/releases/tag/v0.5.1; https://bugzilla.redhat.com/show_bug.cgi?id=1845067
CVE: CVE-2020-10763
Published: 2020-11-24
Description: An information-disclosure flaw was found in the way Heketi before 10.1.0 logs sensitive information. This flaw allows an attacker with local access to the Heketi server to read potentially sensitive information such as gluster-block passwords.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-532, CWE-532
References: https://bugzilla.redhat.com/show_bug.cgi?id=1845387; https://github.com/heketi/heketi/releases/tag/v10.1.0; https://bugzilla.redhat.com/show_bug.cgi?id=1845387
CVE: CVE-2020-24815
Published: 2020-11-24
Description: A Server-Side Request Forgery (SSRF) affecting the PDF generation in MicroStrategy 10.4, 2019 before Update 6, and 2020 before Update 2 allows authenticated users to access the content of internal network resources or leak files from the local system via HTML containers embedded in a dossier/dashboard document. NOTE: 10.4., no fix will be released as version will reach end-of-life on 31/12/2020.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-918
References: http://microstrategy.com; https://community.microstrategy.com/s/article/Securing-PDF-and-Excel-Export-with-Whitelists?language=en_US; https://triskelelabs.com/extracting-your-aws-access-keys-through-a-pdf-file/
CVE: CVE-2020-28726
Published: 2020-11-24
Description: Open redirect in SeedDMS 6.0.13 via the dropfolderfileform1 parameter to out/out.AddDocument.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://sourceforge.net/p/seeddms/code/ci/877844cbba0749367b8ba0e4e0bde34a1dc838f1/; https://sourceforge.net/p/seeddms/code/ci/877844cbba0749367b8ba0e4e0bde34a1dc838f1/
CVE: CVE-2020-29040
Published: 2020-11-24
Description: An issue was discovered in Xen through 4.14.x allowing x86 HVM guest OS users to cause a denial of service (stack corruption), cause a data leak, or possibly gain privileges because of an off-by-one error. NOTE: this issue is caused by an incorrect fix for CVE-2020-27671.
CVSS Score: 8.8 (HIGH)
CWE: CWE-193, CWE-787
References: http://www.openwall.com/lists/oss-security/2021/01/19/4; http://xenbits.xen.org/xsa/advisory-355.html; https://xenbits.xen.org/xsa/advisory-355.html
CVE: CVE-2020-7378
Published: 2020-11-24
Description: CRIXP OpenCRX version 4.30 and 5.0-20200717 and prior suffers from an unverified password change vulnerability. An attacker who is able to connect to the affected OpenCRX instance can change the password of any user, including admin-Standard, to any chosen value. This issue was resolved in version 5.0-20200904, released September 4, 2020.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-620, CWE-287
References: https://blog.rapid7.com/2020/11/24/cve-2020-7378-opencrx-unverified-password-change/; https://blog.rapid7.com/2020/11/24/cve-2020-7378-opencrx-unverified-password-change/
CVE: CVE-2020-13620
Published: 2020-11-24
Description: Fastweb FASTGate GPON FGA2130FWB devices through 2020-05-26 allow CSRF via the router administration web panel, leading to an attacker's ability to perform administrative actions such as modifying the configuration.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://lucadidomenico.medium.com/fastgate-gpon-cross-site-request-forgery-cve-2020-13620-e279f3fbaee4; https://members.backbox.org/fastgate-gpon-cross-site-request-forgery/; https://lucadidomenico.medium.com/fastgate-gpon-cross-site-request-forgery-cve-2020-13620-e279f3fbaee4
CVE: CVE-2020-13942
Published: 2020-11-24
Description: It is possible to inject malicious OGNL or MVEL scripts into the /context.json public endpoint. This was partially fixed in 1.5.1 but a new attack vector was found. In Apache Unomi version 1.5.2 scripts are now completely filtered from the input. It is highly recommended to upgrade to the latest available version of the 1.5.x release to fix this problem.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20, CWE-74
References: http://unomi.apache.org./security/cve-2020-13942.txt; http://www.openwall.com/lists/oss-security/2020/11/24/5; https://advisory.checkmarx.net/advisory/CX-2020-4284
CVE: CVE-2020-28331
Published: 2020-11-24
Description: Barco wePresent WiPG-1600W devices have Improper Access Control. Affected Version(s): 2.5.1.8. The Barco wePresent WiPG-1600W device has an SSH daemon included in the firmware image. By default, the SSH daemon is disabled and does not start at system boot. The system initialization scripts read a device configuration file variable to see if the SSH daemon should be started. The web interface does not provide a visible capability to alter this configuration file variable. However, a malicious actor can include this variable in a POST such that the SSH daemon will be started when the device boots.
CVSS Score: 7.5 (HIGH)
References: http://packetstormsecurity.com/files/160162/Barco-wePresent-Undocumented-SSH-Interface.html; https://korelogic.com/Resources/Advisories/KL-001-2020-007.txt; http://packetstormsecurity.com/files/160162/Barco-wePresent-Undocumented-SSH-Interface.html
CVE: CVE-2020-28928
Published: 2020-11-24
Description: In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access (buffer overflow).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: http://www.openwall.com/lists/oss-security/2020/11/20/4; https://lists.apache.org/thread.html/r2134abfe847bea7795f0e53756d10a47e6643f35ab8169df8b8a9eb1%40%3Cnotifications.apisix.apache.org%3E; https://lists.apache.org/thread.html/r90b60cf49348e515257b4950900c1bd3ab95a960cf2469d919c7264e%40%3Cnotifications.apisix.apache.org%3E
CVE: CVE-2020-28994
Published: 2020-11-24
Description: A SQL injection vulnerability was discovered in Karenderia Multiple Restaurant System, affecting versions 5.4.2 and below. The vulnerability allows for an unauthenticated attacker to perform various tasks such as modifying and leaking all contents of the database.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://gist.github.com/wes4m/e32080b02c2cd668d50eeac66613ca1d; https://gist.github.com/wes4m/e32080b02c2cd668d50eeac66613ca1d
CVE: CVE-2020-25640
Published: 2020-11-24
Description: A flaw was discovered in WildFly before 21.0.0.Final where, Resource adapter logs plain text JMS password at warning level on connection error, inserting sensitive information in the log file.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-209, CWE-532
References: https://bugzilla.redhat.com/show_bug.cgi?id=1881637; https://github.com/amqphub/amqp-10-resource-adapter/issues/13; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-28330
Published: 2020-11-24
Description: Barco wePresent WiPG-1600W devices have Unprotected Transport of Credentials. Affected Version(s): 2.5.1.8. An attacker armed with hardcoded API credentials (retrieved by exploiting CVE-2020-28329) can issue an authenticated query to display the admin password for the main web user interface listening on port 443/tcp of a Barco wePresent WiPG-1600W device.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-522
References: https://korelogic.com/Resources/Advisories/KL-001-2020-005.txt; https://korelogic.com/Resources/Advisories/KL-001-2020-005.txt