CVE-2017-15290 Information disclosure in n/a
An attacker can intercept cleartext data sent from the server to the client during login, potentially exposing sensitive information.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-15290?
CVE-2017-15290 is a high-severity vulnerability in n/a, published on 12 Oct 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Mirasys Video Management System (VMS) 6.x before 6.4.6, 7.x before 7.5.15, and 8.x before 8.1.1 has a login process in which cleartext data is sent from a server to a client, and not all of this data is required for the client functionality.
Weakness: CWE-319
Which versions are affected by CVE-2017-15290?
It affects 1 product.
Products include Mirasys Video Management System.
How do I fix CVE-2017-15290?
No fix has been published for CVE-2017-15290 yet. Limit exposure of the affected software until one is available.
Is CVE-2017-15290 being exploited?
There is no known exploitation of CVE-2017-15290 in the wild and no public exploit code.
Sources
Also known as GHSA-rph6-5xp5-mjmr.