CVE-2015-4069

Arcserve UDP has a credential information-disclosure vulnerability in the EdgeServiceImpl Web service. In versions prior to 5.0 Update 4, remote attackers can exploit crafted SOAP requests to getBackupPolicy or getBackupPolicies to obtain sensitive credentials. The issue arises from insufficient ...