CVE-2012-2964

Published: Aug 12, 2012Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The BreakingPoint Storm appliance before 3.0 requires cleartext credentials for establishing a session from a GUI administrative client, which allows remote attackers to obtain sensitive information by sniffing the network for XML documents.

Affected (5)

Products: Breakingpointsystems: Breakingpoint Storm Appliance Ctm, Breakingpoint Storm Appliance

Breakingpointsystems

2 products

Breakingpoint Storm Appliance Ctm

Breakingpoint Storm Appliance

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Breakingpointsystems Breakingpoint Storm Appliance Ctm	Up to 2.0
Breakingpointsystems Breakingpoint Storm Appliance Ctm	Version 1.2
Breakingpointsystems Breakingpoint Storm Appliance Ctm	Version 1.4
Breakingpointsystems Breakingpoint Storm Appliance Ctm	Version 1.5
Breakingpointsystems Breakingpoint Storm Appliance	All versions