insightvm Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/insightvm/ Sun, 26 Feb 2023 06:33:43 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png insightvm Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/insightvm/ 32 32 CVE-2019-5641 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-5641/ Sun, 26 Feb 2023 06:33:43 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-5641/ Rapid7 InsightVM suffers from an information exposure issue whereby, when the user’s session has ended due to inactivity, an attacker can use the Inspect Element browser feature to remove the login panel and view the details available in the last webpage visited by previous user

The post CVE-2019-5641 appeared first on CVE Vulnerability.

]]> Rapid7 InsightVM suffers from an information exposure issue whereby, when the user’s session has ended due to inactivity, an attacker can use the Inspect Element browser feature to remove the login panel and view the details available in the last webpage visited by previous user

The post CVE-2019-5641 appeared first on CVE Vulnerability.

]]> CVE-2019-5615 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-5615/ Sun, 26 Feb 2023 06:33:42 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-5615/ Users with Site-level permissions can access files containing the username-encrypted passwords of Security Console Global Administrators and clear-text passwords for restoring backups, as well as the salt for those passwords. Valid credentials are required to access these files and malicious users would still need to perform additional work to decrypt the credentials and escalate privileges. […]

The post CVE-2019-5615 appeared first on CVE Vulnerability.

]]> Users with Site-level permissions can access files containing the username-encrypted passwords of Security Console Global Administrators and clear-text passwords for restoring backups, as well as the salt for those passwords. Valid credentials are required to access these files and malicious users would still need to perform additional work to decrypt the credentials and escalate privileges. This issue affects: Rapid7 InsightVM versions 6.5.11 through 6.5.49.

The post CVE-2019-5615 appeared first on CVE Vulnerability.

]]>