What’s Vulnerable › Vulnerabilities

CVE-2019-13023

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-05-14 · updated 2026-06-17
• Weakness: CWE-200

Description

An issue was discovered in all versions of Bond JetSelect. Within the JetSelect Application, the web interface hides RADIUS secrets, WPA passwords, and SNMP strings from 'non administrative' users using HTML 'password field' obfuscation. By using Developer tools or similar, it is possible to change the obfuscation so that the credentials are visible.

Affected products

• Jetstream Jetselect: all versions

References

• https://labs.nettitude.com/blog/cve-2019-13021-22-23-jetselect-network-segregation-application/
• https://labs.nettitude.com/blog/cve-2019-13021-22-23-jetselect-network-segregation-application/

Get alerted when CVE-2019-13023 or the next vulnerability affects your stack