CVE-2019-13023 - CVE House
Back to Database
Status published Medium CVE-2019-13023

An issue was discovered in all versions of Bond JetSelect....

Vulnerability Description

An issue was discovered in all versions of Bond JetSelect. Within the JetSelect Application, the web interface hides RADIUS secrets, WPA passwords, and SNMP strings from 'non administrative' users using HTML 'password field' obfuscation. By using Developer tools or similar, it is possible to change the obfuscation so that the credentials are visible.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-13023

Credits & Attribution

No credits recorded in the NVD database.

References

More from jetstream

View All →
CVE-2019-13022
Bond JetSelect (all versions) has an issue in the Java...
Critical 9.8
CVE-2019-13021
The administrative passwords for all versions of Bond JetSelect are...
Medium 6.5

Affected Vendor

Affected Software

jetselect
Vulnerable Versions:
Unknown

Timeline

Official Publish: May 14th, 2020
Last Modified: August 4th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.