Security Advisory

CVE-2016-6545

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-07-13 20:00:00

Last updated 2024-08-06 01:36:27

Assigner certcc

CVSS score not scored

State PUBLISHED

Description

Session cookies are not used for maintaining valid sessions in iTrack Easy. The user's password is passed as a POST parameter over HTTPS using a base64 encoded passwd field on every request. In this implementation, sessions can only be terminated when the user changes the associated password.

← Browse all CVEs View on cve.org ↗