CVE-2019-19291

MEDIUM Year: 2019
CVSS v3 Score
6.5
Medium
CVSS v2 Score
3.5
Low
Weakness Type
CWE-313
View all →

Vulnerability Description

A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0), SiNVR/SiVMS Video Server (All versions < V5.0.0). The FTP services of the SiVMS/SiNVR Video Server and the Control Center Server (CCS) maintain log files that store login credentials in cleartext. In configurations where the FTP service is enabled, authenticated remote attackers could extract login credentials of other users of the service.

Related Vulnerabilities

CVE-2024-6785

MEDIUM
CVSS:7.1(High)

The configuration file stores credentials in cleartext. An attacker with local access rights can read or modify the configuration file, potentially resulting in the service being abused due to sensiti...

CWE-3132024

CVE-2023-0114

MEDIUM
CVSS:5.5(Medium)

A vulnerability was found in Netis Netcore Router. It has been rated as problematic. Affected by this issue is some unknown functionality of the file param.file.tgz of the component Backup Handler. Th...

CWE-3132023

CVE-2023-2863

MEDIUM
CVSS:5.5(Medium)

A vulnerability has been found in Simple Design Daily Journal 1.012.GP.B on Android and classified as problematic. Affected by this vulnerability is an unknown functionality of the component SQLite Da...

CWE-3132023

CVE-2023-4066

MEDIUM
CVSS:5.5(Medium)

A flaw was found in Red Hat's AMQ Broker, which stores certain passwords in a secret security-properties-prop-module, defined in ActivemqArtemisSecurity CR; however, they are shown in plaintext in the...

CWE-3132023

CVE-2024-30406

MEDIUM
CVSS:5.5(Medium)

A Cleartext Storage in a File on Disk vulnerability in Juniper Networks Junos OS Evolved ACX Series devices using the Paragon Active Assurance Test Agent software installed on network devices allows a...

CWE-3132024

CVE-2024-9040

MEDIUM
CVSS:5.5(Medium)

A vulnerability, which was classified as problematic, was found in code-projects Blood Bank Management System 1.0. This affects an unknown part of the component Password Handler. The manipulation lead...

CWE-3132024