VDG Security SENSE (formerly DIVA) 2.3.13 sends the user database when a user logs in, which allows remote authenticated users to obtain usernames and password hashes by logging in to TCP port 51410 and reading the response.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2015-01-08T15:00:00Z
Updated: 2024-09-16T23:50:25.923Z
Reserved: 2015-01-08T00:00:00Z
Link: CVE-2014-9577
Vulnrichment
No data.
NVD
Status : Modified
Published: 2015-01-08T15:59:02.610
Modified: 2024-11-21T02:21:10.323
Link: CVE-2014-9577
Redhat
No data.