Authentication flaw

2012-08-1216:55:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

73.7%

JSON

The administrative interface in the embedded web server on the BreakingPoint Storm appliance before 3.0 does not require authentication for the gwt/BugReport script, which allows remote attackers to obtain sensitive information by downloading a .tgz file.

CPENameOperatorVersion
breakingpoint_storm_appliance_ctmle2.0
breakingpoint_storm_appliance_ctmeq1.2
breakingpoint_storm_appliance_ctmeq1.4
breakingpoint_storm_appliance_ctmeq1.5

Name	Operator	Version
breakingpoint_storm_appliance_ctm	le	2.0
breakingpoint_storm_appliance_ctm	eq	1.2
breakingpoint_storm_appliance_ctm	eq	1.4
breakingpoint_storm_appliance_ctm	eq	1.5