PT-2015-4154 · Clorius Controls · Clorius Controls Java Web Client

Publicado 2015-01-17 · Atualizado 2025-09-05 · CVE-2014-9199

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Clorius Controls Java web client versions prior to 01.00.0009g

Description The issue allows remote attackers to discover credentials by sniffing the network for cleartext-equivalent traffic.

Recommendations For versions prior to 01.00.0009g, update to version 01.00.0009g or later to resolve the issue.

Correção

Inadequate Encryption Strength

Information Disclosure

Enumeração de Fraquezas

CWE-326

CWE-200

Identificadores relacionados

CVE-2014-9199

Produtos afetados

Clorius Controls Java Web Client

Referências · 5

• http://cloriuscontrols.com · Nota
• https://ics-cert.us-cert.gov/advisories/ICSA-15-013-02 · Nota
• https://cisa.gov/news-events/ics-advisories/icsa-15-013-02 · Nota
• https://t.me/cveNotify/134515 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2014-9199 · Nota de Segurança