Beveiligingsadvies

CVE-2002-0670

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2002-07-15 04:00:00
Laatst bijgewerkt 2024-08-08 02:56:38
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

The web interface for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 uses Base64 encoded usernames and passwords for HTTP basic authentication, which allows remote attackers to steal and easily decode the passwords via sniffing.