Lucene search
HistoryMay 03, 2005 - 4:00 a.m.
CVE-2005-1411
cve-2005-1411
cybration icuii
plaintext password
local privilege escalation
icuii.ini
security vulnerability
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.9 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
0.4%
Cybration ICUII 7.0 stores passwords in plaintext in the world-readable icuii.ini file, which allows local users to gain privileges.
Affected configurations
Node
cybrationicuiiMatch7.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| cybration:icuii | cybration icuii | eq | 7.0 |
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.9 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
0.4%
Related for CVE-2005-1411