Information Disclosure Vulnerability in Apple Xsan Admin Application
CVE-2009-2201
Currently unrated
What is CVE-2009-2201?
The screensharing feature in the Admin application of Apple Xsan versions prior to 2.2 exposes sensitive information by embedding usernames and passwords in cleartext URLs within error dialogs. This vulnerability allows attackers with physical access to read these dialogs and capture user credentials, posing a serious risk to security. To mitigate this issue, upgrading to the latest version or ensuring that physical access to the system is restricted is essential.