CVE-2012-2964 The BreakingPoint Storm appliance before 3.0 requires cleartext credentials for establishing a session from a GUI administrative client, which allows remote attackers to obtain sensitive information b...
MediumCVSS 5.0
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The BreakingPoint Storm appliance before 3.0 requires cleartext credentials for establishing a session from a GUI administrative client, which allows remote attackers to obtain sensitive information by sniffing the network for XML documents.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| breakingpointsystems breakingpoint storm appliance ctm | <= 2.0 | No fix listed |
| breakingpointsystems breakingpoint storm appliance ctm | = 1.2 | No fix listed |
| breakingpointsystems breakingpoint storm appliance ctm | = 1.4 | No fix listed |
| breakingpointsystems breakingpoint storm appliance ctm | = 1.5 | No fix listed |
| breakingpointsystems breakingpoint storm appliance | All versions | No fix listed |
References
- VU#520430 third-party-advisory us-government-resource
- www.kb.cert.org us-government-resource
- www.secureworks.com