CVE-2010-0216: Inventivetec Mediacast

Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days.

authenticate_ad_setup_finished.cfm in MediaCAST 8 and earlier allows remote attackers to discover usernames and cleartext passwords by reading the error messages returned for requests that use the UserID parameter.

Affected products

• Inventivetec Mediacast: up to and including 8

Published 2011-05-10. Last modified 2026-06-16.