CVE-2021-23896

MEDIUM Year: 2021
CVSS v3 Score
4.5
Medium
CVSS v2 Score
2.7
Low
Weakness Type
CWE-319
View all →

Vulnerability Description

Cleartext Transmission of Sensitive Information vulnerability in the administrator interface of McAfee Database Security (DBSec) prior to 4.8.2 allows an administrator to view the unencrypted password of the McAfee Insights Server used to pass data to the Insights Server. This user is restricted to only have access to DBSec data in the Insights Server.

Related Vulnerabilities

CVE-2021-20335

MEDIUM
CVSS:4.6(Medium)

For MongoDB Ops Manager versions prior to and including 4.2.24 with multiple OM application servers, that have SSL turned on for their MongoDB processes, the upgrade to MongoDB Ops Manager versions pr...

CWE-3192021

CVE-2021-39077

MEDIUM
CVSS:4.4(Medium)

IBM Security Guardium 10.5, 10.6, 11.0, 11.1, 11.2, 11.3, and 11.4 stores user credentials in plain clear text which can be read by a local privileged user. IBM X-Force ID: 215587.

CWE-3192021

CVE-2022-20243

MEDIUM
CVSS:4.4(Medium)

In Core Utilities, there is a possible log information disclosure. This could lead to local information disclosure of sensitive browsing data with System execution privileges needed. User interaction ...

CWE-3192022

CVE-2022-22457

MEDIUM
CVSS:4.4(Medium)

IBM Security Verify Governance, Identity Manager 10.0.1 stores sensitive information including user credentials in plain clear text which can be read by a local privileged user. IBM X-Force ID: 225007...

CWE-3192022

CVE-2022-41327

MEDIUM
CVSS:4.4(Medium)

A cleartext transmission of sensitive information vulnerability [CWE-319] in Fortinet FortiOS version 7.2.0 through 7.2.4, 7.0.0 through 7.0.8, FortiProxy version 7.2.0 through 7.2.1 and 7.0.0 through...

CWE-3192022

CVE-2024-31799

MEDIUM
CVSS:4.6(Medium)

Information Disclosure in GNCC's GC2 Indoor Security Camera 1080P allows an attacker with physical access to read the WiFi passphrase via the UART Debugging Port.

CWE-3192024