CVE-2023-31069

An issue was discovered in TSplus Remote Access through 16.0.2.14. Credentials are stored as cleartext within the HTML source code of the login page.
Configurations

Configuration 1 (hide)

cpe:2.3:a:tsplus:tsplus_remote_access:*:*:*:*:*:*:*:*

History

21 Nov 2024, 08:01

Type Values Removed Values Added
References () http://packetstormsecurity.com/files/174271/TSPlus-16.0.0.0-Insecure-Credential-Storage.html - Third Party Advisory, VDB Entry () http://packetstormsecurity.com/files/174271/TSPlus-16.0.0.0-Insecure-Credential-Storage.html - Third Party Advisory, VDB Entry
References () https://www.exploit-db.com/exploits/51681 - Third Party Advisory, VDB Entry () https://www.exploit-db.com/exploits/51681 - Third Party Advisory, VDB Entry

25 Oct 2023, 13:05

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 7.5
v2 : unknown
v3 : 9.8

13 Sep 2023, 03:53

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.5
References (MISC) http://packetstormsecurity.com/files/174271/TSPlus-16.0.0.0-Insecure-Credential-Storage.html - (MISC) http://packetstormsecurity.com/files/174271/TSPlus-16.0.0.0-Insecure-Credential-Storage.html - Third Party Advisory, VDB Entry
References (MISC) https://www.exploit-db.com/exploits/51681 - (MISC) https://www.exploit-db.com/exploits/51681 - Third Party Advisory, VDB Entry
First Time Tsplus tsplus Remote Access
Tsplus
CPE cpe:2.3:a:tsplus:tsplus_remote_access:*:*:*:*:*:*:*:*
CWE CWE-312

11 Sep 2023, 19:15

Type Values Removed Values Added
New CVE

Information

Published : 2023-09-11 19:15

Updated : 2024-11-21 08:01


NVD link : CVE-2023-31069

Mitre link : CVE-2023-31069

CVE.ORG link : CVE-2023-31069


JSON object : View

Products Affected

tsplus

  • tsplus_remote_access
CWE
CWE-312

Cleartext Storage of Sensitive Information