Castelle Faxpress Plaintext Password Disclosure Vulnerability

Castelle Faxpress Plaintext Password Disclosure Vulnerability

Castelle FaxPress is an integrated solution for a network fax environment. FaxPress is a hardware and software server providing fax functionality, and is designed to integrate with Microsoft Windows, Novell NetWare, and Linux based systems.

When a network print job is submitted with an incorrect password, the FaxPress notice system is used to send an error message back to the client. This message includes the submitted username and password in plaintext, possibly leading to the disclosure of sensitive information.