Lucene search

K
cve[email protected]CVE-2009-2429
HistoryJul 10, 2009 - 5:30 p.m.

CVE-2009-2429

2009-07-1017:30:00
CWE-255
web.nvd.nist.gov
25
cve-2009-2429
smartfilter
web gateway
security
credentials
cleartext
admin_backup.xml
permissions
local users
privileges
nvd

6.5 Medium

AI Score

Confidence

Low

4.6 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.1%

SmartFilter Web Gateway Security 4.2.1.00 stores user credentials in cleartext in admin_backup.xml files and uses insecure permissions for these files, which allows local users to gain privileges. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected configurations

NVD
Node
mcafeesmartfilterMatch4.2.1.00

6.5 Medium

AI Score

Confidence

Low

4.6 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.1%

Related for CVE-2009-2429