CVE-2024-36460

The front-end audit log allows viewing of unprotected plaintext passwords, where the passwords are displayed in plain text.

Scoring

Severity

HIGH

CVSS base score

8.1

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

EPSS probability

0.61%

CWE

CWE-256

Published

2024-08-09

Last modified

2026-03-13

Affected products

• Zabbix Zabbix
• Zabbix Zabbix
• Zabbix Zabbix
• Zabbix Zabbix

Weakness type

• CWE-256

Related vulnerabilities

• CVE-2026-19051 — Plaintext Storage of User Credentials in Menulux Software's Menulux Portal
• CVE-2026-15933 — Cleartext Storage of Sensitive Credentials in OptimiDoc Server (On-Premise)
• CVE-2021-38489 — HDD Password Stored In Plaintext
• CVE-2026-82453 — rust-iot-platform Cleartext Password Storage via User Model
• CVE-2026-55765 — CloudNativePG: Cleartext role passwords recorded in pg_stat_statements allow privileged tenant roles to recover the PostgreSQL superuser credential and achieve RCE in the database pod
• CVE-2026-55164 — Lemur: Plaintext password storage in Lemur user-update path
• CVE-2026-50641 — Plaintext password storage in Streamsoft Business Intelligence
• CVE-2026-41874 — Hard-coded admin credentials in Quick.Cart

Markdown version · Browse all CVEs