Lucene search
PRIOn knowledge basePRION:CVE-2019-17393HistoryOct 18, 2019 - 5:15 p.m.
Authentication flaw
2019-10-1817:15:00
PRIOn knowledge base
www.prio-n.com
1
The Customer’s Tomedo Server in Version 1.7.3 communicates to the Vendor Tomedo Server via HTTP (in cleartext) that can be sniffed by unauthorized actors. Basic authentication is used for the authentication, making it possible to base64 decode the sniffed credentials and discover the username and password.
Related
cve
cve
CVE-2019-17393
2019-10-18 17:15:10
nvd
nvd
CVE-2019-17393
2019-10-18 17:15:10
packetstorm
packetstorm
Tomedo Server 1.7.3 Information Disclosure / Weak Cryptography
2019-10-16 00:00:00
cvelist
cvelist
CVE-2019-17393
2019-10-18 16:04:41