CVE-2016-10512

2017-09-2918:00:00

mitre

www.cve.org

multitech faxfinder

unencrypted passwords

ldap configuration

AI Score

9.5

Confidence

High

EPSS

0.002

Percentile

58.5%

JSON

MultiTech FaxFinder before 4.1.2 stores Passwords unencrypted for maintaining the test connectivity function of its LDAP configuration. These credentials are retrieved by the system when the LDAP configuration page is opened and are embedded directly into the HTML source code in cleartext.