PT-2012-2975 · Unknown · Remote Login Service

Ted Gould · Publicado 2012-11-24 · Atualizado 2017-08-29 · CVE-2012-0959

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Remote Login Service (RLS) version 1.0.0

Description The issue arises from the Remote Login Service (RLS) not properly clearing account information when switching users. This could potentially allow physically proximate users to obtain login credentials.

Recommendations For Remote Login Service (RLS) version 1.0.0, consider implementing a proper account information clearing mechanism when switching users to prevent unauthorized access to login credentials.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2012-0959

Produtos afetados

Remote Login Service

Referências · 4

• https://exchange.xforce.ibmcloud.com/vulnerabilities/80278 · Nota
• http://ubuntu.com/usn/USN-1624-1 · Aviso do Fabricante
• https://bugs.launchpad.net/remote-login-service/%2Bbug/1070896 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-0959 · Nota de Segurança