The DevonIT thin-client management tool relies on a shared secret for authentication but transmits the secret in cleartext, which makes it easier for remote attackers to discover the secret value, and consequently obtain administrative control over client machines, by sniffing the network.
                
            References
                    | Link | Resource | 
|---|---|
| http://www.kb.cert.org/vuls/id/278785 | US Government Resource | 
Configurations
                    Information
                Published : 2010-08-25 13:00
Updated : 2010-08-25 21:00
NVD link : CVE-2010-3122
Mitre link : CVE-2010-3122
JSON object : View
CWE
                
                    
                        
                        CWE-255
                        
            Credentials Management Errors
Products Affected
                devonit
- thin-client_management_tool


