VULNERABILITY INTELLIGENCE

CVE-2009-2201

CVSS score2.1 NONE
EPSS probability0.34%
CISA KEVNot currently listed
Published2009-09-15
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:N/A:N

Description

The screensharing feature in the Admin application in Apple Xsan before 2.2 places a cleartext username and password in a URL within an error dialog, which allows physically proximate attackers to obtain credentials by reading this dialog.

Weakness classification

  • nvd@nist.gov: CWE-310

Primary references