CVE-2010-0216 - authenticate_ad_setup_finished.cfm in MediaCAST 8 and earlier allows remote attackers to discover usernames and cleartext passwords by reading the error messages returned for requests that use the UserID parameter

Back Back to CVE browser

MEDIUM

authenticate_ad_setup_finished.cfm in MediaCAST 8 and earlier allows remote attackers to discover usernames and cleartext passwords by reading the error messages returned for requests that use the UserID parameter

Published May 10, 2011

5.0

MEDIUM

CVSS 2.0

EPSS 1.57%

Description

authenticate_ad_setup_finished.cfm in MediaCAST 8 and earlier allows remote attackers to discover usernames and cleartext passwords by reading the error messages returned for requests that use the UserID parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-310

References (6)

http://secunia.com/advisories/44182
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securityreason.com/securityalert/8245
third-party-advisoryx_refsource_SREASON
http://www.osvdb.org/72079
vdb-entryx_refsource_OSVDB
http://www.packetninjas.net/storage/advisories/MediaCast-PWDump-FINAL.txt
x_refsource_MISCExploit
http://www.securityfocus.com/bid/47572
vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/67082
vdb-entryx_refsource_XF

Link	Providers	Tags
http://secunia.com/advisories/44182		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securityreason.com/securityalert/8245		third-party-advisoryx_refsource_SREASON
http://www.osvdb.org/72079		vdb-entryx_refsource_OSVDB
http://www.packetninjas.net/storage/advisories/MediaCast-PWDump-FINAL.txt		x_refsource_MISCExploit
http://www.securityfocus.com/bid/47572		vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/67082		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner certcc

Published May 10, 2011

Updated Aug 7, 2024

Reserved Jan 6, 2010

Link CVE-2010-0216

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2010-0216

Red Hat

Severity n/a

Public date n/a

Links CVE-2010-0216