Description
Peercast places a cleartext password in a query string, which might allow attackers to obtain sensitive information by sniffing the network, or obtaining Referer or browser history information.
References
- 42055 vdb-entry
- peercast-password-information-disclosure(34713) vdb-entry
- 20070604 2007-06-03: PeerCast streaming server submits cleartext password mailing-list
- 2774 third-party-advisory