NVD

Id
88105  
Name
CVE-2017-7899  
Description
An Information Exposure issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AWA, Series A and B, Version 16.00 and prior versions; 1763-L16BBB, Series A and B, Version 16.00 and prior versions; 1763-L16BWA, Series A and B, Version 16.00 and prior versions; and 1763-L16DWD, Series A and B, Version 16.00 and prior versions and Allen-Bradley MicroLogix 1400 programmable logic controllers 1766-L32AWA, Series A and B, Version 16.00 and prior versions; 1766-L32BWA, Series A and B, Version 16.00 and prior versions; 1766-L32BWAA, Series A and B, Version 16.00 and prior versions; 1766-L32BXB, Series A and B, Version 16.00 and prior versions; 1766-L32BXBA, Series A and B, Version 16.00 and prior versions; and 1766-L32AWAA, Series A and B, Version 16.00 and prior versions. User credentials are sent to the web server using the HTTP GET method, which may result in the credentials being logged. This could make user credentials available for unauthorized retrieval.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-07-18  
Published
2017-06-29  
Modified Date
2017-07-07  
Seq
2017-7899  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
422262 88105 CVE-2016-7053 94244  View
422263 88105 CVE-2016-7053 https://www.openssl.org/news/secadv/20161110.txt  View
430477 88105 CVE-2017-0691 99478  View
430478 88105 CVE-2017-0691 https://source.android.com/security/bulletin/2017-07-01  View
430479 88105 CVE-2017-0691 99478  View
430480 88105 CVE-2017-0691 https://source.android.com/security/bulletin/2017-07-01  View

Related JVN