Lucene search
HistorySep 08, 2006 - 9:04 p.m.
CVE-2006-4642
auditwizard
remote audit
plaintext password
laytoncmdsvc.log
sensitive information
local users
1.7 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:S/C:P/I:N/A:N
6.2 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
AuditWizard 6.3.2, when using “Remote Audit,” logs the administrator password in plaintext to LaytonCmdSvc.log, which allows local users to obtain sensitive information by reading the file.
Affected configurations
Node
auditwizardauditwizardMatch6.3.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| auditwizard:auditwizard | auditwizard | eq | 6.3.2 |
1.7 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:S/C:P/I:N/A:N
6.2 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2006-4642