---
id: 4200
title: "[CVE-2019-6464] Tegile Intelliflash OS Version 3.7.0.8.180413 (GA) - Password Disclosure"
cve: CVE-2019-6464
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/tegile-intelliflash-os-advisory"
published_at: "2019-05-14T00:00:00Z"
tags: ["vulnerability-advisory", "tegile", "intelliflash", "password-disclosure", "cve-2019-6464", "storage-security"]
phying_url: "https://phying.com/item/4200"
lang: en
---

# [CVE-2019-6464] Tegile Intelliflash OS Version 3.7.0.8.180413 (GA) - Password Disclosure

## Summary

Tegile IntelliFlash OS stored cleartext passwords in its web interface, letting authenticated users recover SMTP, SNMP and VMware credentials via source inspection (CVE-2019-6464).

## Intelligence Metadata

- **Sources:** bishopfox.com
- **CVE:** CVE-2019-6464
- **Published:** 2019-05-14T00:00:00Z
- **Original:** https://bishopfox.com/blog/tegile-intelliflash-os-advisory
- **Phying News:** https://phying.com/item/4200