CVE-2009-2201

🗓️ 15 Sep 2009 22:30:00Reported by [email protected]Type

The Admin application in Apple Xsan allows physical attackers to obtain credentials by reading cleartext username and password in a URL within an error dialog

Reporter	Title	Published	Views	Family All 6
ATTACKERKB	CVE-2009-2201	15 Sep 200922:30	–	attackerkb
CVE	CVE-2009-2201	15 Sep 200922:00	–	cve
Cvelist	CVE-2009-2201	15 Sep 200922:00	–	cvelist
EUVD	EUVD-2009-2197	7 Oct 202500:30	–	euvd
Prion	Design/Logic Flaw	15 Sep 200922:30	–	prion
seebug.org	Apple Xsan Admin出错消息信息泄露漏洞	16 Sep 200900:00	–	seebug

NVD

Node

apple xsanRange≤2.1.1

apple xsanMatch1.0

apple xsanMatch1.2

apple xsanMatch1.3

Source	Link
securitytracker	www.securitytracker.com/id
support	www.support.apple.com/kb/HT3797
vupen	www.vupen.com/english/advisories/2009/2644
secunia	www.secunia.com/advisories/36673
securityfocus	www.securityfocus.com/bid/36385
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/53232
osvdb	www.osvdb.org/58133
lists	www.lists.apple.com/archives/security-announce/2009/Sep/msg00005.html

23 Apr 2026 00:35Current

6Medium risk

Vulners AI Score6

CVSS 22.1

EPSS0.00082

CWE-310