CVE-2010-3122

2022-10-0316:20:57

mitre

www.cve.org

devonit

thin-client

authentication

cleartext

remote attackers

administrative control

6.8 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.1%

JSON

The DevonIT thin-client management tool relies on a shared secret for authentication but transmits the secret in cleartext, which makes it easier for remote attackers to discover the secret value, and consequently obtain administrative control over client machines, by sniffing the network.

References

www.kb.cert.org/vuls/id/278785