description: Acemanager in ALEOS before version 4.16 allows a user with valid credentials to reconfigure the device to expose the ACEManager credentials on the pre-login status page.
problem types: CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor
affected:
{
vendor: n/a
product: ALEOS
versions:
version: all versions before 4.16, status: affected
}