CVE-2007-5439

Loading...

General

Score:5.0/10.0
Severity:Medium
Category:Access Control Error
Exploit:Available

Impact Metrics

Confidentiality:Partial
Integrity:None
Availability:None

Exploitability Metrics

Access Vector:Network
Access Complexity:Low
Authentication:None

Published on 13/10/07 - Updated on 15/10/18

Description

CA (formerly Computer Associates) eTrust ITM (Threat Manager) 8.1 stores sensitive user information in log files with predictable names, which allows remote attackers to obtain this information via unspecified vectors.

Category: Access Control Error

CWE-264 (Permissions, Privileges, and Access Control)
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.

Security Notices

US National Vulnerability DatabaseCVE-2007-5439

Exploits

SecurityFocusBID-26012

Relative technologies

VendorProduct
caetrust_integrated_threat_management

Share this vulnerability with:

Twitter Facebook LinkedIn Mail