Huawei VCN500 with software before V100R002C00SPC201 logs passwords in cleartext, which allows remote authenticated users to obtain sensitive information by triggering log generation and then reading the log.
References
Link | Resource |
---|---|
http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-463084.htm | Vendor Advisory |
Configurations
Configuration 1 (hide)
AND |
|
Information
Published : 2016-01-11 07:59
Updated : 2016-01-11 09:33
NVD link : CVE-2015-8335
Mitre link : CVE-2015-8335
JSON object : View
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
Products Affected
huawei
- vcn500