authenticate_ad_setup_finished.cfm in MediaCAST 8 and earlier allows remote attackers to discover usernames and cleartext passwords by reading the error messages returned for requests that use the UserID parameter.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Mediacast | Inventivetec | * | 8 (including) |