CVE-2010-0550: admin.htm in Geo++ GNCASTER 1.4.0.7 and earlier does not properly enforce HTTP Digest Authentication, which...

Security readout for executives and security teams

Geo++ GNCASTER’s admin page was intended to require HTTP Digest Authentication, but affected versions allowed authenticated users to use weaker HTTP Basic Authentication instead. This is a security policy bypass, not evidence of unauthenticated takeover. Business urgency depends on whether GNCASTER administration is exposed beyond trusted networks. Exposure is likely limited to organizations running Geo++ GNCASTER 1.4.0.7 or earlier, especially where admin.htm is reachable over remote networks. The source bundle does not identify affected CPEs or broader product families. Treat as a targeted configuration and legacy-product risk. Prioritize if GNCASTER supports business-critical geospatial services or if administrative interfaces are reachable remotely. Otherwise, handle through legacy asset review and access restriction. Mitigation focus: Identify any Geo++ GNCASTER deployments and their versions.; Check Geo++ or trusted vendor guidance for fixed versions or official mitigations.; Restrict admin.htm access to trusted management networks only..

Prepared

Jun 28, 2026, 09:59 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.