Vulnerabilities > Insufficiently Protected Credentials
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2019-10-17 | CVE-2019-11284 | Insufficiently Protected Credentials vulnerability in Pivotal Reactor Netty Pivotal Reactor Netty, versions prior to 0.8.11, passes headers through redirects, including authorization ones. | 8.6 |
| 2019-10-16 | CVE-2019-17662 | Insufficiently Protected Credentials vulnerability in Cybelsoft Thinvnc 1.0 ThinVNC 1.0b1 is vulnerable to arbitrary file read, which leads to a compromise of the VNC server. | 9.8 |
| 2019-10-16 | CVE-2019-10448 | Insufficiently Protected Credentials vulnerability in Jenkins Extensive Testing 1.4.3/1.4.4 Jenkins Extensive Testing Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system. | 8.8 |
| 2019-10-15 | CVE-2019-17356 | Insufficiently Protected Credentials vulnerability in Infinitestudio Infinite Design 3.4.12 The Infinite Design application 3.4.12 for Android sends a username and password via TCP without any encryption during login, as demonstrated by sniffing of a public Wi-Fi network. | 6.5 |
| 2019-10-11 | CVE-2019-17497 | Insufficiently Protected Credentials vulnerability in Pdf-Xchange Editor Tracker PDF-XChange Editor before 8.0.330.0 has an NTLM SSO hash theft vulnerability using crafted FDF or XFDF files (a related issue to CVE-2018-4993). | 6.5 |
| 2019-10-09 | CVE-2019-0072 | Insufficiently Protected Credentials vulnerability in Juniper SBR Carrier 8.4.1/8.5.0 An Unprotected Storage of Credentials vulnerability in the identity and access management certificate generation procedure allows a local attacker to gain access to confidential information. | 5.5 |
| 2019-09-25 | CVE-2019-10429 | Insufficiently Protected Credentials vulnerability in Jenkins Gitlab Logo 1.0.0/1.0.1/1.0.3 Jenkins GitLab Logo Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system. | 5.5 |
| 2019-09-25 | CVE-2019-10426 | Insufficiently Protected Credentials vulnerability in Jenkins GEM Publisher 1.0 Jenkins Gem Publisher Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system. | 5.5 |
| 2019-09-25 | CVE-2019-10425 | Insufficiently Protected Credentials vulnerability in Jenkins Google Calendar 0.2/0.3/0.4 Jenkins Google Calendar Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system. | 6.5 |
| 2019-09-25 | CVE-2019-10424 | Insufficiently Protected Credentials vulnerability in Jenkins Eloyente Jenkins elOyente Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system. | 5.5 |