Media CP Media Control Panel latest version. Insufficiently protected credential change.
CWE-522, CWE-522