CVE-2011-5247

Snare for Linux before 1.7.0 has password disclosure because the rendered page contains the field RemotePassword...

CVE-2011-5247

CVE-2011-5247 affects Snare for Linux prior to 1.7.0. The vulnerability arises in the web interface ( RemotePassword field in the /remote page); the password is disclosed by inspecting the page source, as the MD5 hash of the password is exposed. This constitutes an information disclosure vulnerab...