CVE-2019-3428

Name of the Vulnerable Software and Affected Versions ZTE ZXCDN IAMWEB version V6.01.03.01

Description The issue is related to a configuration error, allowing an attacker to directly access the management portal over HTTP. This could result in the leakage of users' information.

Recommendations For version V6.01.03.01, consider configuring the management portal to use HTTPS instead of HTTP to encrypt the communication and prevent information leakage. Additionally, review and update the configuration to prevent direct access to the management portal.