Vulnerabilities > Rapid7 > Komand > 0.2.1

DATE CVE VULNERABILITY TITLE RISK
2018-11-28 CVE-2018-5559 Cleartext Storage of Sensitive Information vulnerability in Rapid7 Komand
In Rapid7 Komand version 0.41.0 and prior, certain endpoints that are able to list the always encrypted-at-rest connection data could return some configurations of connection data without obscuring sensitive data from the API response sent over an encrypted channel.
network
low complexity
rapid7 CWE-312
4.0
4.0