ZIV Web Server Authentication Credentials Exposure Vulnerability

A vulnerability exists in ZIV devices that exposes authentication credentials for the device's web server. The credentials are transmitted in base64 encoding within the HTTP headers. Since base64 is not a secure encryption method, an attacker could intercept the web request during the login process and retrieve the credentials.

Impact

Exploitation of this vulnerability allows for unauthorized access to the device's web server, potentially leading to further actions based on the access rights of the authenticated user.