CVE-2012-2963

The CVE-2012-2963 issue affects BreakingPoint Storm CTM before 3.0 where the embedded web server’s gwt/BugReport script does not enforce authorization, allowing an unauthenticated remote attacker to download a .tgz containing sensitive configuration data. The vulnerability is documented with an a...

CVE-2012-2964

CVE-2012-2964 affects BreakingPoint Storm CTM prior to version 3.0. The issue stems from the CTM administrative interface failing to properly authorize requests to the embedded web server, allowing an unauthenticated remote attacker to retrieve a diagnostic report containing sensitive configurati...