Cisco Digital Media Manager (DMM) before 5.2 allows remote authenticated users to discover Cisco Digital Media Player credentials via vectors related to reading a (1) error log or (2) stack trace, aka Bug ID CSCtc46050.
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Link | Tags |
---|---|
http://www.securityfocus.com/bid/38502 | vdb entry |
http://securitytracker.com/id?1023671 | vdb entry |
https://exchange.xforce.ibmcloud.com/vulnerabilities/56637 | vdb entry |
http://secunia.com/advisories/38800 | third party advisory |
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1b923.shtml | patch vendor advisory |
http://www.vupen.com/english/advisories/2010/0531 | vdb entry |