CoreCVE
Back

HIGH

The Huawei D100 stores the administrator's account name and password in cleartext in a cookie, which allows context-dependent attackers to obtain sensitive information by (1) reading a cookie file, by (2) sniffing the network for HTTP headers, and possibly by using unspecified other vectors

Published Jul 1, 2009

Description

The Huawei D100 stores the administrator's account name and password in cleartext in a cookie, which allows context-dependent attackers to obtain sensitive information by (1) reading a cookie file, by (2) sniffing the network for HTTP headers, and possibly by using unspecified other vectors.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-312

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Jul 1, 2009
Updated Aug 7, 2024
Reserved Jul 1, 2009
Link CVE-2009-2272
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 16, 2026
Link CVE-2009-2272
Red Hat
Severity n/a
Public date n/a
Links CVE-2009-2272