Design/Logic Flaw

2012-08-1216:55:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

73.3%

JSON

The BreakingPoint Storm appliance before 3.0 requires cleartext credentials for establishing a session from a GUI administrative client, which allows remote attackers to obtain sensitive information by sniffing the network for XML documents.

CPENameOperatorVersion
breakingpoint_storm_appliance_ctmle2.0
breakingpoint_storm_appliance_ctmeq1.2
breakingpoint_storm_appliance_ctmeq1.4
breakingpoint_storm_appliance_ctmeq1.5

Name	Operator	Version
breakingpoint_storm_appliance_ctm	le	2.0
breakingpoint_storm_appliance_ctm	eq	1.2
breakingpoint_storm_appliance_ctm	eq	1.4
breakingpoint_storm_appliance_ctm	eq	1.5