CVE-2010-0598

Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 does not encrypt HTTP sessions from operator workstations, which allows remote attackers to discover Administrator credentials by sniffing the network, aka Bug ID CSCtb83631.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:cisco:mediator_framework:1.5.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:mediator_framework:2.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:mediator_framework:3.0.8:*:*:*:*:*:*:*
OR cpe:2.3:h:cisco:network_building_mediator_nbm-2400:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:network_building_mediator_nbm-4800:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:richards-zeta_mediator_2500:*:*:*:*:*:*:*:*

Information

Published : 2010-05-27 12:30

Updated : 2010-06-13 12:16


NVD link : CVE-2010-0598

Mitre link : CVE-2010-0598


JSON object : View

CWE
CWE-255

Credentials Management Errors

Advertisement

dedicated server usa

Products Affected

cisco

  • network_building_mediator_nbm-4800
  • mediator_framework
  • network_building_mediator_nbm-2400
  • richards-zeta_mediator_2500