CVE-2012-2964 in BreakingPoint Storm appliance

Summary

The BreakingPoint Storm appliance before 3.0 requires cleartext credentials for establishing a session from a GUI administrative client, which allows remote attackers to obtain sensitive information by sniffing the network for XML documents.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservation: 05/30/2012
• Disclosure: 08/12/2012
• Moderation: VulDB entry created
• Entries: VDB-61535 (1)
• CPE: ready
• CWE: CWE-20 (Confirmed)
• CVSS: 5.3
• EPSS: 0.01600
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-2964
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-2964
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-2964/