CVE-2021-3130

5.9 MEDIUM

Within the Open-AudIT up to version 3.5.3 application, the web interface hides SSH secrets, Windows passwords, and SNMP strings from user...

Published: 2021-01-20 · Last updated: 2026-06-17

Severity and scoring

CVSS: 5.9 MEDIUM
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

Vendor	Product
opmantek	open-audit

Description

Within the Open-AudIT up to version 3.5.3 application, the web interface hides SSH secrets, Windows passwords, and SNMP strings from users using HTML 'password field' obfuscation. By using Developer tools or similar, it is possible to change the obfuscation so that the credentials are visible.

Source: NVD

References

[NVD]https://nvd.nist.gov/vuln/detail/CVE-2021-3130
[Vendor advisory]https://opmantek.com/network-discovery-inventory-software/
[Other]https://raw.githubusercontent.com/B0D0B0P0T/CVE/main/CVE-2021-3130
[Vendor advisory]https://opmantek.com/network-discovery-inventory-software/
[Other]https://raw.githubusercontent.com/B0D0B0P0T/CVE/main/CVE-2021-3130

Related CVEs

Same vendor

CVE-2021-3333 — Opmantek Open-AudIT 4.0.1 is affected by cross-site scripting (XSS) (6.1 MEDIUM)