Lucene search

K
cve[email protected]CVE-2004-2436
HistoryDec 31, 2004 - 5:00 a.m.

CVE-2004-2436

2004-12-3105:00:00
NVD-CWE-Other
web.nvd.nist.gov
19
computer associates
unicenter
common services
cve-2004-2436
password storage
privilege escalation

7.5 High

AI Score

Confidence

Low

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.3%

Computer Associates Unicenter Common Services 3.0 and earlier stores the database “SA” password in cleartext in the TndAddNspTmp.bat file, which could allow local users to gain privileges.

7.5 High

AI Score

Confidence

Low

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.3%