CVE-2009-2272
Severity CVSS v4.0:
Pending analysis
Type:
CWE-312
Cleartext Storage of Sensitive Information
Publication date:
01/07/2009
Last modified:
13/02/2024
Description
The Huawei D100 stores the administrator's account name and password in cleartext in a cookie, which allows context-dependent attackers to obtain sensitive information by (1) reading a cookie file, by (2) sniffing the network for HTTP headers, and possibly by using unspecified other vectors.
Impact
Base Score 3.x
7.50
Severity 3.x
HIGH
Base Score 2.0
5.00
Severity 2.0
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:o:huawei:d100_firmware:-:*:*:*:*:*:*:* | ||
cpe:2.3:h:huawei:d100:-:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page