PT-2005-1666 · Einstein · Einstein

Publicado 2005-03-02 · Atualizado 2008-09-05 · CVE-2005-0620

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Einstein version 1.0

Description The issue allows local users to steal credit card information because it is stored in plaintext in the world-readable wallets.dat file.

Recommendations For version 1.0, consider encrypting the credit card information stored in the wallets.dat file to prevent unauthorized access. As a temporary workaround, restrict access to the wallets.dat file to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2005-0620

Produtos afetados

Einstein

Referências · 2

• http://secunia.com/advisories/14455 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-0620 · Nota de Segurança