VULNERABILITY INTELLIGENCE
CVE-2018-16498
CVSS score5.5 MEDIUM
EPSS probability0.17%
CISA KEVNot currently listed
Published2021-05-26
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Description
In Versa Director, the unencrypted backup files stored on the Versa deployment contain credentials stored within configuration files. These credentials are for various application components such as SNMP, and SSL and Trust keystores.
Weakness classification
- CWE-312: Cleartext Storage of Sensitive Information
Primary references
- support@hackerone.com — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory