| Package | Affected versions | Patched versions |
|---|---|---|
| prolog manager | = 2007= 7.0= 7.5 |
Meridian Prolog Manager 2007, and 7.5 and earlier, sends all usernames and passwords to the client in a (1) cleartext or (2) weakly encrypted format to support client-side login authentication, which makes it easier for remote attackers to obtain database access by capturing credentials via a man-in-the-middle attack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free