Ruijie Smartweb Management System Password Information Disclosure

Sooraj V Nair

Published on

20 Dec 2021

Vulnerability

Description

Web-based management allows managing switches, routers, and other network devices through browsers such as the Internet Explorer (IE). Smart web is a fully functional built-in Web-GUI allows operation to be intuitive and convenient.Information disclosure security issues allow malicious hackers to gain useful and confidential information about the target.

Mitigation measures

Always make sure that proper access controls and authorizations are in place in order to disallow access for attackers on all web servers, services and web applications.
Make sure that all exceptions are well handled when the web application fails and no technical information is reported in the errors.

Automated human-like penetration testing for your web apps & APIs

Teams using Beagle Security are set up in minutes, embrace release-based CI/CD security testing and save up to 65% with timely remediation of vulnerabilities. Sign up for a free account to see what it can do for you.

Product tour

Written by