Vulnerability in Smartertools Smarterstats
CVE-2011-2151
The (1) Admin/frmEmailReportSettings.aspx, (2) Admin/frmGeneralSettings.aspx, (3) Admin/frmSite.aspx, (4) Client/frmUser.aspx, and (5) Login.aspx components in the SmarterTools SmarterStats 6.0 web server accept cleartext passwords, which makes it easier for remote attackers to obtain sensitive information by sniffing the network.
Vulnerability class: POODLE (CVE-2014-3566)
EPSS: 0.027 (84.2th percentile) — read the EPSS interpretation.
Affected products
- Smartertools Smarterstats — versions 6.0
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (US Government Resource, x_refsource_MISC)
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)