PT-1998-1186 · Hummingbird · Hummingbird Exceed

Published 1998-12-03 · Updated 2017-12-19 · CVE-1999-1280

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Hummingbird Exceed version 6.0.1.0

Description The issue involves the inclusion of a development and testing DLL in Hummingbird Exceed, which logs user names and passwords in cleartext in the test.log file.

Recommendations For version 6.0.1.0, remove the development and testing DLL to prevent cleartext logging of user credentials.

Fix

Related Identifiers

CVE-1999-1280

Affected Products

Hummingbird Exceed

References · 3

• http://securityfocus.com/archive/1/11512 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-1999-1280 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/1547 · Note