PT-2005-3138 · Capturix · Capturix Scanshare

CVE-2005-2209 · Publicado 2005-07-11 · Atualizado 2024-02-13

Positive Technologies (AI Summary)

CVSS v2.0

1.9

Baixa

Vetor base

AV:L/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Capturix ScanShare version 1.06 build 50

Description: The issue concerns the storage of sensitive information, such as passwords, in cleartext within the capturixss cfg.ini file. This file is readable by local users, potentially exposing the stored sensitive information.

Recommendations: For Capturix ScanShare version 1.06 build 50, consider restricting access to the capturixss cfg.ini file to minimize the risk of sensitive information exposure until a more secure method of storing passwords is implemented.

Exploit

Correção

Cleartext Storage of Sensitive Information

Enumeração de Fraquezas

CWE-312

Identificadores relacionados

CVE-2005-2209

Produtos afetados

Capturix Scanshare

Referências · 4

• 🔥 http://securitytracker.com/id?1014409 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-2209 · Nota de Segurança
• https://t.me/cvenotify/71248 · Publicação no Telegram
• http://secunia.com/advisories/15995 · Nota