Description
The eSoft InstaGate EX2 UTM device stores the admin password within the settings HTML document, which might allow context-dependent attackers to obtain sensitive information by reading this document.
References
- 38173 vdb-entry
- http://labs.calyptix.com/CX-2007-05.php
- http://labs.calyptix.com/CX-2007-05.txt
- 20070711 Calyptix Security Advisory CX-2007-05 - eSoft InstaGate EX2 Cross-Site Request Forgery Attack mailing-list
- 26005 third-party-advisory