CVE-2018-5559

In Rapid7 Komand version 0.41.0 and prior, certain endpoints that are able to list the always encrypted-at-rest connection data could return some configurations of connection data without obscuring sensitive data from the API response sent over an encrypted channel. This issue does not affect Rapid7 Komand version 0.42.0 and later versions.

• CWE-212
• CWE-312

• https://docs.komand.com/docs/release-notes#section-komand-v0-42-0-2018-11-1Release Notes, Vendor Advisory
• https://www.alexanderjaeger.de/cve-2018-5559_my_first_cve/Exploit, Third Party Advisory
• https://docs.komand.com/docs/release-notes#section-komand-v0-42-0-2018-11-1Release Notes, Vendor Advisory
• https://www.alexanderjaeger.de/cve-2018-5559_my_first_cve/Exploit, Third Party Advisory

Published

Nov 28, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-5548On BIG-IP APM 11.6.0-11.6.3, an insecure AES ECB mode is use…
• CVE-2018-5549On BIG-IP APM 11.6.0-11.6.3.1, 12.1.0-12.1.3.3, 13.0.0, and …
• CVE-2018-5550Versions of Epson AirPrint released prior to January 19, 201…
• CVE-2018-5551Versions of DocuTrac QuicDoc and Office Therapy that ship wi…9
• CVE-2018-5552Versions of DocuTrac QuicDoc and Office Therapy that ship wi…2.9
• CVE-2018-5553The Crestron Console service running on DGE-100, DM-DGE-200-…9.8
• CVE-2018-5560A reliance on a static, hard-coded credential in the design …10
• CVE-2018-558213Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-5650In Long Range Zip (aka lrzip) 0.631, there is an infinite lo…
• CVE-2018-5651An issue was discovered in the dark-mode plugin 1.6 for Word…
• CVE-2018-5652An issue was discovered in the dark-mode plugin 1.6 for Word…
• CVE-2018-5653An issue was discovered in the weblizar-pinterest-feeds plug…