Vulnerabilities (CVE)

Filtered by CWE-549
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-10122 1 Topdata 1 Inner Rep Plus 2024-11-06 3.3 LOW 4.9 MEDIUM
A vulnerability was found in Topdata Inner Rep Plus WebServer 2.01. It has been classified as problematic. Affected is an unknown function of the file /InnerRepPlus.html of the component Operator Details Form. The manipulation leads to missing password field masking. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2022-43426 1 Jenkins 1 S3 Explorer 2024-02-04 N/A 5.3 MEDIUM
Jenkins S3 Explorer Plugin 1.0.8 and earlier does not mask the AWS_SECRET_ACCESS_KEY form field, increasing the potential for attackers to observe and capture it.