← Database

CVE-2010-0598

CRITICAL CVSS: 9.3 Published: 2010-05-27 Modified: 2026-06-16

Description

Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 does not encrypt HTTP sessions from operator workstations, which allows remote attackers to discover Administrator credentials by sniffing the network, aka Bug ID CSCtb83631.

Affected Platforms

Cisco Network Building Mediator Nbm-2400Cisco Mediator FrameworkCisco Richards-Zeta Mediator 2500Cisco Network Building Mediator Nbm-4800

Weakness Type

CWE-255

References