PT-2006-6308 · Axalto · Axalto Protiva

Nnposter · Published 2006-10-28 · Updated 2018-10-17 · CVE-2006-5600

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Axalto Protiva version 1.1

Description: The issue allows local users to gain privileges by reading passwords stored in plaintext in files with insecure permissions. The passwords can be found in files such as KeyToolkeytool.config or webappsprotivaWEB-INFclassesauthserver.config.

Recommendations: For Axalto Protiva version 1.1, consider restricting access to the KeyToolkeytool.config and webappsprotivaWEB-INFclassesauthserver.config files to minimize the risk of exploitation. Additionally, modify the permissions of these files to secure them and prevent unauthorized access. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2006-5600

Affected Products

Axalto Protiva

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2006-5600 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29839 · Note
• http://securityreason.com/securityalert/1793 · Note
• http://securityfocus.com/bid/20755 · Note
• http://securityfocus.com/archive/1/449891/100/0/threaded · Note