Vulnerabilities > CVE-2021-3130 - Unspecified vulnerability in Opmantek Open-Audit

CVSS 5.9 - MEDIUM

Attack vector

NETWORK

Attack complexity

HIGH

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

high complexity

opmantek

NVD

Published: 2021-01-20

Updated: 2022-07-12

Summary

Within the Open-AudIT up to version 3.5.3 application, the web interface hides SSH secrets, Windows passwords, and SNMP strings from users using HTML 'password field' obfuscation. By using Developer tools or similar, it is possible to change the obfuscation so that the credentials are visible.

Vulnerable Configurations

Part	Description	Count
Application	Opmantek Opmantek Open Audit 1.0.3 Opmantek Open Audit 1.0.4 Opmantek Open Audit 1.0.5 Opmantek Open Audit 1.0.6 Opmantek Open Audit 1.1 Opmantek Open Audit 1.2 Opmantek Open Audit 1.2.1 Opmantek Open Audit 1.3 Opmantek Open Audit 1.3.1 Opmantek Open Audit 1.3.2 Opmantek Open Audit 1.4 Opmantek Open Audit 1.5.1 Opmantek Open Audit 1.5.2 Opmantek Open Audit 1.5.3 Opmantek Open Audit 1.6 Opmantek Open Audit 1.6.2 Opmantek Open Audit 1.6.4 Opmantek Open Audit 1.8 Opmantek Open Audit 1.8.2 Opmantek Open Audit 1.8.4 Opmantek Open Audit 1.10 Opmantek Open Audit 1.12 Opmantek Open Audit 1.12.2 Opmantek Open Audit 1.12.2-1 Opmantek Open Audit 1.12.4 Opmantek Open Audit 1.12.6 Opmantek Open Audit 1.12.8 Opmantek Open Audit 1.12.8.1 Opmantek Open Audit 1.12.8.2 Opmantek Open Audit 1.12.10 Opmantek Open Audit 1.14.2 Opmantek Open Audit 2.0.1 Opmantek Open Audit 2.0.1-1 Opmantek Open Audit 2.0.1-2 Opmantek Open Audit 2.0.2 Opmantek Open Audit 2.0.2-1 Opmantek Open Audit 2.0.4 Opmantek Open Audit 2.0.6 Opmantek Open Audit 2.0.8 Opmantek Open Audit 2.0.10 Opmantek Open Audit 2.0.11 Opmantek Open Audit 2.1 Opmantek Open Audit 2.1.0 Opmantek Open Audit 2.1.1 Opmantek Open Audit 2.2.0 Opmantek Open Audit 2.2.1 Opmantek Open Audit 2.2.2 Opmantek Open Audit 2.2.3 Opmantek Open Audit 2.2.4 Opmantek Open Audit 2.2.5 Opmantek Open Audit 2.2.6 Opmantek Open Audit 2.2.7 Opmantek Open Audit 2.3.0 Opmantek Open Audit 2.3.1 Opmantek Open Audit 2.3.2 Opmantek Open Audit 2.3.3 Opmantek Open Audit 3.0.0 Opmantek Open Audit 3.0.1 Opmantek Open Audit 3.0.2 Opmantek Open Audit 3.1.0 Opmantek Open Audit 3.1.1 Opmantek Open Audit 3.1.2 Opmantek Open Audit 3.2.0 Opmantek Open Audit 3.2.1 Opmantek Open Audit 3.2.2 Opmantek Open Audit 3.3.0 Opmantek Open Audit 3.3.1 Opmantek Open Audit 3.3.2 Opmantek Open Audit 3.4.0 Opmantek Open Audit 3.5.0 Opmantek Open Audit 3.5.1 Opmantek Open Audit 3.5.2 Opmantek Open Audit 3.5.3 Opmantek Open Audit 4.0.1 Opmantek Open Audit 4.0.2	110

Summary

Vulnerable Configurations

References