CVE-2016-6537 | BDVDB-2026-78162 Detail

Description#

AVer Information EH6108H+ devices with firmware X9.03.24.00.07l store passwords in a cleartext base64 format and require cleartext credentials in HTTP Cookie headers, which allows context-dependent attacks to obtain sensitive information by reading these strings.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.kb.cert.org/vuls/id/667480
http://www.securityfocus.com/bid/92936

Exploit#

No public exploit known

History#

Version 12016-09-19Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.