CVE-2009-2201

Опубликовано: 15 сент. 2009

Источник: nvd

CVSS2: 2.1

EPSS Низкий

Описание

The screensharing feature in the Admin application in Apple Xsan before 2.2 places a cleartext username and password in a URL within an error dialog, which allows physically proximate attackers to obtain credentials by reading this dialog.

Ссылки

http://lists.apple.com/archives/security-announce/2009/Sep/msg00005.html
Patch
Vendor Advisory
http://osvdb.org/58133
http://secunia.com/advisories/36673
http://support.apple.com/kb/HT3797
Patch
Vendor Advisory
http://www.securityfocus.com/bid/36385
Patch
http://www.securitytracker.com/id?1022904
http://www.vupen.com/english/advisories/2009/2644
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/53232
http://lists.apple.com/archives/security-announce/2009/Sep/msg00005.html
Patch
Vendor Advisory
http://osvdb.org/58133
http://secunia.com/advisories/36673
http://support.apple.com/kb/HT3797
Patch
Vendor Advisory
http://www.securityfocus.com/bid/36385
Patch
http://www.securitytracker.com/id?1022904
http://www.vupen.com/english/advisories/2009/2644
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/53232

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apple:xsan:*:*:*:*:*:*:*:*

Версия до 2.1.1 (включая)

cpe:2.3:a:apple:xsan:1.0:*:*:*:*:*:*:*

cpe:2.3:a:apple:xsan:1.2:*:*:*:*:*:*:*

cpe:2.3:a:apple:xsan:1.3:*:*:*:*:*:*:*

EPSS

Процентиль: 24%

0.00082

Низкий

2.1 Low

CVSS2

Дефекты

CWE-310

Связанные уязвимости

GHSA-mcx8-qrwm-525r

github

почти 4 года назад