PT-1998-1186 · Hummingbird · Hummingbird Exceed

Publicado 1998-12-03 · Atualizado 2017-12-19 · CVE-1999-1280

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Hummingbird Exceed version 6.0.1.0

Description The issue involves the inclusion of a development and testing DLL in Hummingbird Exceed, which logs user names and passwords in cleartext in the test.log file.

Recommendations For version 6.0.1.0, remove the development and testing DLL to prevent cleartext logging of user credentials.

Correção

Identificadores relacionados

CVE-1999-1280

Produtos afetados

Hummingbird Exceed

Referências · 3

• http://securityfocus.com/archive/1/11512 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/1547 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-1999-1280 · Nota de Segurança