CVE-2014-8357

backupsettings.html in the web administrative portal in Zhone zNID GPON 2426A before S3.0.501 places a session key in a URL, which allows remote attackers to obtain arbitrary user passwords via the sessionKey parameter in a getConfig action to backupsettings.conf...

PT-2017-6233

Name of the Vulnerable Software and Affected Versions Zhone zNID GPON 2426A versions prior to S3.0.501 Description The issue allows remote attackers to obtain arbitrary user passwords. This is achieved by exploiting the sessionKey parameter in a getConfig action to backupsettings.conf via the...

CVE-2014-8357

backupsettings.html in the web administrative portal in Zhone zNID GPON 2426A before S3.0.501 places a session key in a URL, which allows remote attackers to obtain arbitrary user passwords via the sessionKey parameter in a getConfig action to backupsettings.conf. Recent assessments: Assessed...

CVE-2014-8357: Undefined Security Weakness

backupsettings.html in the web administrative portal in Zhone zNID GPON 2426A before S3.0.501 places a session key in a URL, which allows remote attackers to obtain arbitrary user passwords via the sessionKey parameter in a getConfig action to backupsettings.conf...