PT-2007-6757 · Globe7 · Globe7 Soft Phone Client

Publicado 2007-11-01 · Atualizado 2017-07-29 · CVE-2007-5790

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Globe7 soft phone client version 7.3

Description The issue concerns the use of weak cryptography in the Globe7 soft phone client, specifically a reversed sequence of binary values for password storage. This could potentially allow local users to obtain sensitive information.

Recommendations For Globe7 soft phone client version 7.3, consider updating the password storage mechanism to use stronger cryptography to mitigate the risk of sensitive information disclosure.

Correção

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2007-5790

Produtos afetados

Globe7 Soft Phone Client

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2007-5790 · Nota de Segurança
• http://secunia.com/advisories/27400 · Aviso do Fabricante
• http://securityfocus.com/bid/26195 · Nota
• http://sipera.com/index.php?action=resources%2Cthreat_advisory&tid=364 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/37415 · Nota