Cleartext Data Leakage in Mirasys Video Management System (VMS)

CVE-2017-15290 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:N

Mirasys Video Management System (VMS) 6.x before 6.4.6, 7.x before 7.5.15, and 8.x before 8.1.1 has a login process in which cleartext data is sent from a server to a client, and not all of this data is required for the client functionality.

Learn more about our Cis Benchmark Audit For Server Software.