Signature Detail
Short Name |
HTTP:INFO-LEAK:POLYCOM |
|---|---|
Severity |
Medium |
Recommended |
No |
Category |
HTTP |
Release Date |
2005/08/02 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Polycom Viewstation - Password Disclosure
This signature detects attempts to exploit a known vulnerability against Polycom Viewstation FX. Attackers can access a configuration file that contains the administration passwords, which is accessible by anyone in Polycom Viewstation FX 4.2.
Extended Description
Polycom ViewStation stores the administrator and software update account passwords in plain text within a HTML file. This file can be accessed through the URI http://<target>/a_security.htm.
Affected Products
- Polycom ViewStation FX/VS 4000 4.2.0
References