CVE-2010-0598

🗓️ 27 May 2010 19:00:00Reported by ciscoType

Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on Cisco Network Building Mediator NBM-2400 and NBM-4800 and Richards-Zeta Mediator 2500 does not encrypt HTTP sessions, allowing remote attackers to discover Administrator credentials

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2010-0598	27 May 201010:00	–	circl
Cvelist	CVE-2010-0598	27 May 201019:00	–	cvelist
EUVD	EUVD-2010-0629	7 Oct 202500:30	–	euvd
ICS	Cisco Network Building Mediator	27 Feb 201007:00	–	ics
NVD	CVE-2010-0598	27 May 201019:30	–	nvd
Prion	Design/Logic Flaw	27 May 201019:30	–	prion
securityvulns	Cisco Security Advisory: Multiple Vulnerabilities in Cisco Network Building Mediator	27 May 201000:00	–	securityvulns
securityvulns	Cisco Network Building Mediator multiple security vulnerabilities	27 May 201000:00	–	securityvulns

NVD

Node

cisco mediator_frameworkMatch1.5.1

cisco mediator_frameworkMatch2.2

cisco mediator_frameworkMatch3.0.8

AND

cisco network_building_mediator_nbm-2400

cisco network_building_mediator_nbm-4800

cisco richards-zeta_mediator_2500

Source	Link
kb	www.kb.cert.org/vuls/id/757804
securitytracker	www.securitytracker.com/id
secunia	www.secunia.com/advisories/39904
cisco	www.cisco.com/en/US/products/products_security_advisory09186a0080b2c518.shtml
us-cert	www.us-cert.gov/control_systems/pdf/ICSA-10-147-01_Cisco_Network_Building_Mediator.pdf

29 Apr 2026 01:13Current

6.7Medium risk

Vulners AI Score6.7

CVSS 29.3

EPSS0.0075

CWE-255