PT-2006-6125 · Passgo · Passgo Defender

Publicado 2006-10-19 · Atualizado 2017-07-20 · CVE-2006-5406

Positive Technologies (AI Summary)

CVSS v2.0

3.6

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Passgo Defender version 5.2

Description The issue allows local users to read and modify sensitive files due to the application directory being created with insecure permissions, specifically Everyone/Full Control.

Recommendations For Passgo Defender version 5.2, consider changing the permissions of the application directory to restrict access and prevent unauthorized modification of sensitive files. As a temporary workaround, restrict write access to the directory to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2006-5406

Produtos afetados

Passgo Defender

Referências · 6

• https://exchange.xforce.ibmcloud.com/vulnerabilities/29657 · Nota
• http://secunia.com/advisories/22271 · Aviso do Fabricante
• http://osvdb.org/29789 · Nota
• http://securityfocus.com/bid/20600 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-5406 · Nota de Segurança
• http://vupen.com/english/advisories/2006/4091 · Nota