Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded Erlang cookie for ejabberd replication.
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Cloudcnm_secumanager | Zyxel | 3.1.0 (including) | 3.1.0 (including) |
| Cloudcnm_secumanager | Zyxel | 3.1.1 (including) | 3.1.1 (including) |