CoreCVE
Back

MEDIUM

An issue was discovered in all versions of Bond JetSelect

Published May 14, 2020

Description

An issue was discovered in all versions of Bond JetSelect. Within the JetSelect Application, the web interface hides RADIUS secrets, WPA passwords, and SNMP strings from 'non administrative' users using HTML 'password field' obfuscation. By using Developer tools or similar, it is possible to change the obfuscation so that the credentials are visible.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-200

Exposure of Sensitive Information

CWE-522

Insufficiently Protected Credentials

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published May 14, 2020
Updated Aug 4, 2024
Reserved Jun 28, 2019
Link CVE-2019-13023
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2019-13023
Red Hat
Severity n/a
Public date n/a
Links CVE-2019-13023
ENISA EUVD
Assigner mitre
Published May 14, 2020
Updated Aug 4, 2024
Exploited since n/a
Link EUVD-2019-4591
EUVD-2019-4591