PT-2004-3613 · Tenable · Nessuswx

Publicado 2004-12-31 · Atualizado 2017-07-29 · CVE-2004-2723

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions NessusWX version 1.4.4

Description The issue allows local users to obtain passwords because account passwords are stored in plaintext in .session files.

Recommendations For NessusWX version 1.4.4, consider encrypting or securely storing account passwords to prevent unauthorized access. As a temporary workaround, restrict access to .session files to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2004-2723

Produtos afetados

Nessuswx

Referências · 6

• http://securitytracker.com/id?1009577 · Nota
• http://seclists.org/fulldisclosure/2004/Mar/1343.html · Nota
• http://securityfocus.com/bid/9993 · Nota
• http://osvdb.org/4814 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15641 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-2723 · Nota de Segurança