CVE-2018-5266

Cobham Sea Tel 121 build 222701 devices allow remote attackers to obtain potentially sensitive information about valid usernames by reading the loginName lines at the js/userLogin.js URI. NOTE: default passwords for the standard usernames are listed in the product's documentation: Dealer with password seatel3, SysAdmin with password seatel2, and User with password seatel1.
References
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:cobham:sea_tel_121_firmware:222701:*:*:*:*:*:*:*
cpe:2.3:h:cobham:sea_tel_121:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2018-01-08 03:29

Updated : 2024-02-04 19:29


NVD link : CVE-2018-5266

Mitre link : CVE-2018-5266

CVE.ORG link : CVE-2018-5266


JSON object : View

Products Affected

cobham

  • sea_tel_121_firmware
  • sea_tel_121
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor