Information disclosure

Trapeze TransitMaster is vulnerable to information disclosure emails / hashed passwords via a modified userID field in JSON data to ManageSubscriber.aspx/GetSubscriber. NOTE: this software is independently deployed at multiple municipal transit systems; it is not found exclusively on the...

CVE-2017-14943

CVE-2017-14943 affects Trapeze TransitMaster. The vulnerability permits information disclosure (emails and hashed passwords) through a modified userID field in JSON data sent to ManageSubscriber.aspx/GetSubscriber. The available sources describe the impact but do not specify affected versions, ex...

CVE-2017-14943: Exposure of Sensitive Information to an Unauthorized Actor

Trapeze TransitMaster is vulnerable to information disclosure emails / hashed passwords via a modified userID field in JSON data to ManageSubscriber.aspx/GetSubscriber. NOTE: this software is independently deployed at multiple municipal transit systems; it is not found exclusively on the...

PT-2017-13768

Name of the Vulnerable Software and Affected Versions Trapeze TransitMaster affected versions not specified Description The issue allows for information disclosure, including emails and hashed passwords, through a modified userID field in JSON data sent to the "ManageSubscriber.aspx/GetSubscriber...