CVE-2019-13023

An issue was discovered in all versions of Bond JetSelect. Within the JetSelect Application, the web interface hides RADIUS secrets, WPA passwords, and SNMP strings from 'non administrative' users using HTML 'password field' obfuscation. By using Developer tools or similar, it is possible to change the obfuscation so that the credentials are visible.

• CWE-200
• CWE-522

• https://labs.nettitude.com/blog/cve-2019-13021-22-23-jetselect-network-segregation-application/Third Party Advisory
• https://labs.nettitude.com/blog/cve-2019-13021-22-23-jetselect-network-segregation-application/Third Party Advisory

Published

May 14, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-13013Little Snitch versions 4.3.0 to 4.3.2 have a local privilege…5.5
• CVE-2019-13014Little Snitch versions 4.4.0 fixes a vulnerability in a priv…5.5
• CVE-2019-1302An elevation of privilege vulnerability exists when a ASP.NE…8.8
• CVE-2019-13020The fetch API in Tightrope Media Carousel before 7.1.3 has C…
• CVE-2019-13021The administrative passwords for all versions of Bond JetSel…6.5
• CVE-2019-13022Bond JetSelect (all versions) has an issue in the Java class…9.8
• CVE-2019-13024Centreon 18.x before 18.10.6, 19.x before 19.04.3, and Centr…
• CVE-2019-13025Compal CH7465LG CH7465LG-NCIP-6.12.18.24-5p8-NOSH devices ha…9.8
• CVE-2019-13026OXID eShop 6.0.x before 6.0.5 and 6.1.x before 6.1.4 allows …
• CVE-2019-13027Realization Concerto Critical Chain Planner (aka CCPM) 5.10.…
• CVE-2019-13028An incorrect implementation of a local web server in eID cli…
• CVE-2019-13029Multiple stored Cross-site scripting (XSS) issues in the adm…