TelescopeJS Password Hash Information Disclosure Vulnerability
BID:74331
CVE-2015-3454 |Info
TelescopeJS Password Hash Information Disclosure Vulnerability
| Bugtraq ID: | 74331 |
| Class: | Design Error |
| CVE: |
CVE-2015-3454 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 26 2015 12:00AM |
| Updated: | May 12 2015 07:51PM |
| Credit: | Shubham Shah |
| Vulnerable: |
TelescopeJS TelescopeJS 0 |
| Not Vulnerable: |
TelescopeJS TelescopeJS 0.15 |
Discussion
TelescopeJS Password Hash Information Disclosure Vulnerability
TelescopeJS is prone to an information-disclosure vulnerability.
An attacker can exploit this vulnerability to obtain sensitive information that may lead to further attacks.
Versions prior to TelescopeJS 0.15 are vulnerable.
TelescopeJS is prone to an information-disclosure vulnerability.
An attacker can exploit this vulnerability to obtain sensitive information that may lead to further attacks.
Versions prior to TelescopeJS 0.15 are vulnerable.
Exploit / POC
TelescopeJS Password Hash Information Disclosure Vulnerability
An attacker can use readily available network utilities to exploit this issue.
An attacker can use readily available network utilities to exploit this issue.
Solution / Fix
TelescopeJS Password Hash Information Disclosure Vulnerability
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
TelescopeJS Password Hash Information Disclosure Vulnerability
References:
References: