CWE-312
Des données sensibles sont stockées en clair, lisibles par quiconque accède au support.
- 2
- vulnérabilités suivies
- 1
- critiques
- 23 juillet 2026
- dernière publication
cve
Veille des vulnérabilités
identifiantvulnérabilitésévéritépublié
CVE-2024-58023Information disclosure in Bosch Configuration Manager in Version 7.72.0106 allows an attacker to access sensitive information.Analyse NVD en cours Élevée CVSS 8.4 CVE-2026-13380VSee Clinic 7.1.26 and VSee Clinic API 1.3.0 exposes cleartext SFTP credentials in the HTTP responses of three unauthenticated endpoints. The credentials are present in these responses only when SFTP connections have been configured within the application. No authentication is required to retrieve these credentials. An unauthenticated remote attacker who observes any of these HTTP responses on an instance where SFTP is configured can obtain the credentials and use them to access the associated SFTP server.Analyse NVD en cours Critique CVSS 9