CVE-2017-15290

The CVE-2017-15290 entry describes a information disclosure in Mirasys VMS: versions 6.x before 6.4.6, 7.x before 7.5.15, and 8.x before 8.1.1 use a login flow that sends cleartext data from server to client, and not all of this data is required for client functionality. This could expose sensiti...