Design/Logic Flaw

An issue was discovered in OmniMetrix OmniView, Version 1.2. The OmniView web application transmits credentials with the HTTP protocol, which could be sniffed by an attacker that may result in the compromise of account credentials...

CVE-2016-5801

CVE-2016-5801 affects OmniMetrix OmniView (Version 1.2). Root cause: weak password requirements allow brute-forcing credentials over HTTP, enabling remote access. Impact per sources: credential compromise could enable control of associated backup generators. Mitigation details in public documents...

CVE-2016-5801: Improper Access Control

An issue was discovered in OmniMetrix OmniView, Version 1.2. Insufficient password requirements for the OmniView web application may allow an attacker to gain access by brute forcing account passwords...

CVE-2016-5786: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in OmniMetrix OmniView, Version 1.2. The OmniView web application transmits credentials with the HTTP protocol, which could be sniffed by an attacker that may result in the compromise of account credentials...

PT-2017-8776

Name of the Vulnerable Software and Affected Versions OmniMetrix OmniView version 1.2 Description An issue in the OmniView web application allows an attacker to gain access by brute forcing account passwords due to insufficient password requirements. Recommendations For OmniMetrix OmniView versio...

PT-2017-8772

Name of the Vulnerable Software and Affected Versions OmniMetrix OmniView version 1.2 Description An issue was discovered where the OmniView web application transmits credentials using the HTTP protocol, making them susceptible to being intercepted by an attacker, which could result in the...