PT-2005-1841 · Notifylink · Notifylink

Publicado 2005-03-20 · Atualizado 2008-09-05 · CVE-2005-0812

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions NotifyLink version 3.0

Description The issue allows remote attackers or local users to obtain sensitive information because the web interface displays passwords in cleartext on the administrative page.

Recommendations For NotifyLink version 3.0, consider restricting access to the administrative page as a temporary workaround until a patch is available.

Correção

Identificadores relacionados

CVE-2005-0812

Produtos afetados

Notifylink

Referências · 4

• http://secunia.com/advisories/14617 · Nota
• http://kb.cert.org/vuls/id/770532 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-0812 · Nota de Segurança
• http://securityfocus.com/bid/12843 · Nota