Description
authenticate_ad_setup_finished.cfm in MediaCAST 8 and earlier allows remote attackers to discover usernames and cleartext passwords by reading the error messages returned for requests that use the UserID parameter.
References
- 72079 vdb-entry
- 44182 third-party-advisory
- 47572 vdb-entry
- http://www.packetninjas.net/storage/advisories/MediaCast-PWDump-FINAL.txt
- 8245 third-party-advisory
- mediacast-authenticateadsetup-info-disc(67082) vdb-entry