Vulnerability in Surfcontrol Superscout Email Filter
CVE-2002-1530
The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows users to obtain usernames and plaintext passwords via a request to the userlist.asp program, which includes the passwords in a user editing form.
EPSS: 0.059 (92.5th percentile) — read the EPSS interpretation.
Affected products
- Surfcontrol Superscout_email_filter — versions 3.5, 3.5.1, 4.0
- N/a — versions n/a
References
- cve@mitre.org (Vendor Advisory, mailing-list, Exploit, x_refsource_BUGTRAQ)
- cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
- cve@mitre.org (Patch, vdb-entry, Vendor Advisory, x_refsource_XF)