authenticate_ad_setup_finished.cfm in MediaCAST 8 and earlier allows remote attackers to discover usernames and cleartext passwords by reading the error messages returned for requests that use the UserID parameter.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: certcc

Published:

Updated: 2024-08-07T00:37:54.277Z

Reserved: 2010-01-06T00:00:00

Link: CVE-2010-0216

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2011-05-10T19:55:01.920

Modified: 2025-04-11T00:51:21.963

Link: CVE-2010-0216

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.