Description
FaceSentry Access Control System 6.4.8 contains a cleartext transmission vulnerability that allows remote attackers to intercept authentication credentials. Attackers can perform man-in-the-middle attacks to capture HTTP cookie authentication information during network communication.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| iWT | FaceSentry Access Control System | 6.4.8 build 264, 5.7.2 build 568, 5.7.0 build 539 | — |
References
- Zero Science Lab Vulnerability Advisory third-party-advisory
- Packet Storm Security Exploit Entry exploit
- IBM X-Force Vulnerability Exchange Entry vdb-entry