PT-2005-3138 · Capturix · Capturix Scanshare

Published 2005-07-11 · Updated 2024-02-13 · CVE-2005-2209

Positive Technologies (AI Summary)

CVSS v2.0

1.9

Low

Base vector

AV:L/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Capturix ScanShare version 1.06 build 50

Description: The issue concerns the storage of sensitive information, such as passwords, in cleartext within the capturixss cfg.ini file. This file is readable by local users, potentially exposing the stored sensitive information.

Recommendations: For Capturix ScanShare version 1.06 build 50, consider restricting access to the capturixss cfg.ini file to minimize the risk of sensitive information exposure until a more secure method of storing passwords is implemented.

Exploit

Fix

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

Related Identifiers

CVE-2005-2209

Affected Products

Capturix Scanshare

References · 4

• 🔥 http://securitytracker.com/id?1014409 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-2209 · Security Note
• https://t.me/cvenotify/71248 · Telegram Post
• http://secunia.com/advisories/15995 · Note