CVE-2012-2964

2022-10-0316:15:36

certcc

www.cve.org

breakingpoint storm

cleartext credentials

sensitive information

remote attackers

network sniffing

xml documents

6.2 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

73.3%

JSON

The BreakingPoint Storm appliance before 3.0 requires cleartext credentials for establishing a session from a GUI administrative client, which allows remote attackers to obtain sensitive information by sniffing the network for XML documents.

References

www.kb.cert.org/vuls/id/520430

www.kb.cert.org/vuls/id/MAPG-8GANCC

www.secureworks.com/research/advisories/SWRX-2012-006/