CVE-2010-0598

2010-05-2719:30:01

CWE-255

[email protected]

web.nvd.nist.gov

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.6

Confidence

Low

EPSS

0.011

Percentile

84.8%

JSON

Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 does not encrypt HTTP sessions from operator workstations, which allows remote attackers to discover Administrator credentials by sniffing the network, aka Bug ID CSCtb83631.

Affected configurations

Nvd

Node

ciscomediator_frameworkMatch1.5.1

ciscomediator_frameworkMatch2.2

ciscomediator_frameworkMatch3.0.8

AND

cisconetwork_building_mediator_nbm-2400

cisconetwork_building_mediator_nbm-4800

ciscorichards-zeta_mediator_2500

VendorProductVersionCPE
ciscomediator_framework1.5.1cpe:2.3:a:cisco:mediator_framework:1.5.1:*:*:*:*:*:*:*
ciscomediator_framework2.2cpe:2.3:a:cisco:mediator_framework:2.2:*:*:*:*:*:*:*
ciscomediator_framework3.0.8cpe:2.3:a:cisco:mediator_framework:3.0.8:*:*:*:*:*:*:*
cisconetwork_building_mediator_nbm-2400*cpe:2.3:h:cisco:network_building_mediator_nbm-2400:*:*:*:*:*:*:*:*
cisconetwork_building_mediator_nbm-4800*cpe:2.3:h:cisco:network_building_mediator_nbm-4800:*:*:*:*:*:*:*:*
ciscorichards-zeta_mediator_2500*cpe:2.3:h:cisco:richards-zeta_mediator_2500:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	mediator_framework	1.5.1	cpe:2.3:a:cisco:mediator_framework:1.5.1:::::::*
cisco	mediator_framework	2.2	cpe:2.3:a:cisco:mediator_framework:2.2:::::::*
cisco	mediator_framework	3.0.8	cpe:2.3:a:cisco:mediator_framework:3.0.8:::::::*
cisco	network_building_mediator_nbm-2400	*	cpe:2.3:h:cisco:network_building_mediator_nbm-2400::::::::
cisco	network_building_mediator_nbm-4800	*	cpe:2.3:h:cisco:network_building_mediator_nbm-4800::::::::
cisco	richards-zeta_mediator_2500	*	cpe:2.3:h:cisco:richards-zeta_mediator_2500::::::::