SecuritySpace - CVE-2017-3185

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2017-3185

Description: ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC have a web application that uses the GET method to process requests that contain sensitive information such as user account name and password, which can expose that information through the browser's history, referrers, web logs, and other sources.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2017-3185
BugTraq ID: 96720
http://www.securityfocus.com/bid/96720/info
CERT/CC vulnerability note: VU#355151
https://www.kb.cert.org/vuls/id/355151
https://twitter.com/Hfuhs/status/839252357221330944
https://twitter.com/hack3rsca/status/839599437907386368

CVE ID:	CVE-2017-3185
Description:	ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC have a web application that uses the GET method to process requests that contain sensitive information such as user account name and password, which can expose that information through the browser's history, referrers, web logs, and other sources.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2017-3185 BugTraq ID: 96720 http://www.securityfocus.com/bid/96720/info CERT/CC vulnerability note: VU#355151 https://www.kb.cert.org/vuls/id/355151 https://twitter.com/Hfuhs/status/839252357221330944 https://twitter.com/hack3rsca/status/839599437907386368