high7.5
CVE-2021-42370
A password mismanagement situation exists in XoruX LPAR2RRD and STOR2RRD before 7.30 because cleartext information is present in HTML password input fields in …
Impact
A password mismanagement situation exists in XoruX LPAR2RRD and STOR2RRD before 7.30 because cleartext information is present in HTML password input fields in the device properties. (Viewing the passwords requires configuring a web browser to display HTML password input fields.)
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xorux | Lpar2rrd | from 7.21 before 7.30 |
| Xorux | Stor2rrd | from 7.21 before 7.30 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/orangecertcc/security-research/security/advisories/GHSA-f3qp-4xqq-2wjx
- https://lpar2rrd.com/note730.php
- https://stor2rrd.com/note730.php
- https://github.com/orangecertcc/security-research/security/advisories/GHSA-f3qp-4xqq-2wjx
- https://lpar2rrd.com/note730.php
- https://stor2rrd.com/note730.php