Locked Ncentral 8.x Insecure Access / Unsalted Passwords / CSRF

[1337day-Exploits]

PacketStorm-Security Acaba de publicar lo siguiente:

 

This is the hidden content, please

• Sign In
• or
• Sign Up

;)

 

Ncentral versions 8.0.x through 8.2.0-1152 suffer from insecure SOAP access that leads to an unprivileged SSH session, poor trust based authentication leading to database compromise, plain text password storage, cross site request forgery, and other vulnerabilities.

 

 

01/12/2012 14:44