地图 / sensitive data-creds for database - private key

sensitive data-creds for database - private key

密码学缺陷 / Missing Encryption of Sensitive Data / #2396630

厂商: Mars
严重程度: 低危 · CVSS 4.6
赏金: —
弱点: Missing Encryption of Sensitive Data
研究员: @mosalah1102
披露日期: 2024-11-19
资产: *.royalcanin.com
CVE: —

该报告还没有中文解读。

时间线

2024-02-29报告提交
2024-11-19公开披露

阅读 HackerOne 原文 ↗作者 @mosalah1102 · 版权归作者与 Mars 所有

同类报告

Password and mail address stored unencrypted in memory - Rockstar Game LauncherRockstar Games · 2023-10-27 · $750 curl HSTS long file name clears contentsInternet Bug Bounty · 2024-01-20 CVE-2023-46219: HSTS long file name clears contentscurl · 2023-12-08 Unauthenticated phpinfo()files could lead to ability file read at █████████ [HtUS]U.S. Dept Of Defense · 2023-01-06 When uploading attachments, unencrypted file names are made available to the serverBitwarden · 2021-08-02 Yarn transfers npm credentials over unencrypted http connectionNode.js third-party modules · 2019-08-14

sensitive data-creds for database - private key · 破甲 POJIA