The DevonIT thin-client management tool relies on a shared secret for authentication but transmits the secret in cleartext, which makes it easier for remote attackers to discover the secret value, and consequently obtain administrative control over client machines, by sniffing the network.
References
Link | Resource |
---|---|
http://www.kb.cert.org/vuls/id/278785 | US Government Resource |
Configurations
Information
Published : 2010-08-25 13:00
Updated : 2010-08-25 21:00
NVD link : CVE-2010-3122
Mitre link : CVE-2010-3122
JSON object : View
CWE
CWE-255
Credentials Management Errors
Products Affected
devonit
- thin-client_management_tool