Researchers
Back
Pierluca De Santis
#28998
of 60,462
9.8
Total CVSS
Vulnerabilities
·
1
PT-2018-18794
2018-03-29
9.8
CVE-2018-9031
Tnlsoftsolutions
Tnlsoftsolutions Sentry Vision
The issue concerns the login interface, which discloses passwords by allowing access to an "if(pwd ==" line in the HTML source code. This effectively means that authentication occurs only on the client side.