The login interface on TNLSoftSolutions Sentry Vision 3.x devices provides password disclosure by reading an “if(pwd ==” line in the HTML source code. This means, in effect, that authentication occurs only on the client side.
CPE | Name | Operator | Version |
---|---|---|---|
sentry_vision | eq | 3.1 | |
sentry_vision | eq | 3.2 | |
sentry_vision | eq | 3.0 |