CVE-2021-3130

Within the Open-AudIT up to version 3.5.3 application, the web interface hides SSH secrets, Windows passwords, and SNMP strings from users using HTML 'password field' obfuscation. By using Developer tools or similar, it is possible to change the obfuscation so that the credentials are visible.
Severity
MEDIUM
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Atk. Vector
NETWORK
Atk. Complexity
HIGH
Priv. Required
NONE
Base Score
CVSS 3.x
EPSS Score
Percentile: 56%
VendorProductVersion
opmantekopen-audit
𝑥
≤ 4.0.2
𝑥
= Vulnerable software versions
References
https://opmantek.com/network-discovery-inventory-software/
https://raw.githubusercontent.com/B0D0B0P0T/CVE/main/CVE-2021-3130
https://opmantek.com/network-discovery-inventory-software/
https://raw.githubusercontent.com/B0D0B0P0T/CVE/main/CVE-2021-3130