CVE-2012-2964

Опубликовано: 12 авг. 2012

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

The BreakingPoint Storm appliance before 3.0 requires cleartext credentials for establishing a session from a GUI administrative client, which allows remote attackers to obtain sensitive information by sniffing the network for XML documents.

Ссылки

http://www.kb.cert.org/vuls/id/520430
US Government Resource
http://www.kb.cert.org/vuls/id/MAPG-8GANCC
US Government Resource
http://www.secureworks.com/research/advisories/SWRX-2012-006/
http://www.kb.cert.org/vuls/id/520430
US Government Resource
http://www.kb.cert.org/vuls/id/MAPG-8GANCC
US Government Resource
http://www.secureworks.com/research/advisories/SWRX-2012-006/

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:o:breakingpointsystems:breakingpoint_storm_appliance_ctm:*:*:*:*:*:*:*:*

Версия до 2.0 (включая)

cpe:2.3:o:breakingpointsystems:breakingpoint_storm_appliance_ctm:1.2:*:*:*:*:*:*:*

cpe:2.3:o:breakingpointsystems:breakingpoint_storm_appliance_ctm:1.4:*:*:*:*:*:*:*

cpe:2.3:o:breakingpointsystems:breakingpoint_storm_appliance_ctm:1.5:*:*:*:*:*:*:*

cpe:2.3:h:breakingpointsystems:breakingpoint_storm_appliance:-:*:*:*:*:*:*:*

EPSS

Процентиль: 81%

0.016

Низкий

5 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-mcv3-g84x-j7fc

github

больше 3 лет назад