PT-2006-5427 · New Net Technologies · Auditwizard

Terry Donaldson · Publicado 2006-09-08 · Atualizado 2018-10-17 · CVE-2006-4642

Positive Technologies (AI Summary)

CVSS v2.0

1.7

Baixa

Vetor base

AV:L/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions AuditWizard version 6.3.2

Description The issue allows local users to obtain sensitive information by reading a log file. When using "Remote Audit," the administrator password is logged in plaintext to LaytonCmdSvc.log.

Recommendations For AuditWizard version 6.3.2, consider restricting access to the LaytonCmdSvc.log file to minimize the risk of exploitation. As a temporary workaround, avoid using the "Remote Audit" feature until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2006-4642

Produtos afetados

Auditwizard

Referências · 8

• 🔥 http://securitytracker.com/id?1016795 · Exploit
• http://securityfocus.com/bid/19860 · Nota
• http://securityfocus.com/archive/1/445220/100/0/threaded · Nota
• http://secunia.com/advisories/21773 · Aviso do Fabricante
• http://securityreason.com/securityalert/1525 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28743 · Nota
• http://vupen.com/english/advisories/2006/3498 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-4642 · Nota de Segurança