CVE-2007-6330: Meridian Prolog Manager 2007, and 7.5 and earlier, sends all usernames and passwords to the client in a (1)...

Security readout for executives and security teams

Meridian Prolog Manager 2007 and 7.5 and earlier reportedly sent usernames and passwords to the client in cleartext or weakly encrypted form for client-side login. That means credentials could be exposed outside the server boundary, making database access easier for someone positioned to intercept traffic. Exposure is most likely where affected Meridian Prolog Manager versions are still deployed and users authenticate across untrusted, shared, wireless, or routed networks. Evidence in the bundle does not identify specific deployments, internet exposure patterns, or current vendor patch status. Treat this as high priority if the software remains in use, because it concerns credential exposure and database access. Prioritize discovery first; if present, plan isolation, credential rotation, and supported upgrade or replacement. Mitigation focus: Inventory Meridian Prolog Manager 2007, 7.5, and earlier deployments.; Check vendor or CERT guidance for supported fixes or replacement paths.; Restrict access to trusted network segments until remediated..

Prepared

Jun 28, 2026, 19:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.