Security Advisory

CVE-2014-9577

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2015-01-08 15:00:00

Last updated 2024-09-16 23:50:25

Assigner mitre

State PUBLISHED

Description

VDG Security SENSE (formerly DIVA) 2.3.13 sends the user database when a user logs in, which allows remote authenticated users to obtain usernames and password hashes by logging in to TCP port 51410 and reading the response.

← Browse all CVEs View on cve.org ↗