The server in Citilog 8.0 allows an attacker (in a man in the middle position between the server and its smart camera Axis M1125) to see FTP credentials in a cleartext HTTP traffic. These can be used for FTP access to the server.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2022-07-21T00:00:00

Updated: 2024-08-03T06:03:53.152Z

Reserved: 2022-04-08T00:00:00

Link: CVE-2022-28861

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2022-07-21T16:15:08.987

Modified: 2024-11-21T06:58:04.857

Link: CVE-2022-28861

cve-icon Redhat

No data.