Lucene search

K
cve[email protected]CVE-2007-6096
HistoryNov 22, 2007 - 12:46 a.m.

CVE-2007-6096

2007-11-2200:46:00
CWE-255
web.nvd.nist.gov
17
ingate firewall
siparator
cve-2007-6096
cleartext password storage
security vulnerability

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.5 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.3%

Ingate Firewall before 4.6.0 and SIParator before 4.6.0 use cleartext storage for passwords of “administrators with less privileges,” which might allow attackers to read these passwords via unknown vectors.

Affected configurations

NVD
Node
ingateingate_firewallRange4.5.2
OR
ingateingate_siparatorRange4.5.2

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.5 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.3%

Related for CVE-2007-6096