Description
The web interface in Fujitsu-Siemens Computers PRIMERGY BX300 Switch Blade allows remote attackers to obtain sensitive information by canceling the authentication dialog when accessing a sub-page, which still displays the form field contents of the sub-page, as demonstrated using (1) config/ip_management.htm and (2) config/snmp_config.htm.
References
- 24761 vdb-entry
- ADV-2007-2442 vdb-entry
- 37837 vdb-entry
- http://www.redteam-pentesting.de/advisories/rt-sa-2007-003.php
- 25943 third-party-advisory
- 20070704 Fujitsu-Siemens PRIMERGY BX300 Switch Blade Information Disclosure mailing-list
- primergy-web-interface-info-disclosure(35264) vdb-entry