Lucene search
HistoryFeb 14, 2015 - 3:59 p.m.
CVE-2015-0519
cve-2015-0519
inputaccel database
iadb
emc captiva capture
sql password
sensitive information
local users
security vulnerability
6.6 Medium
AI Score
Confidence
Low
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
0.0004 Low
EPSS
Percentile
5.2%
The InputAccel Database (IADB) installation process in EMC Captiva Capture 7.0 before patch 25 and 7.1 before patch 13 places a cleartext InputAccel (IA) SQL password in a DAL log file, which allows local users to obtain sensitive information by reading a file.
| CPE | Name | Operator | Version |
|---|---|---|---|
| emc:captiva_capture | emc captiva capture | eq | 7.1 |
| emc:captiva_capture | emc captiva capture | eq | 7.0 |
Related
securityvulns
securityvulns
EMC Captiva Capture information leakage
2015-02-23 00:00:00
prion
prion
Design/Logic Flaw
2015-02-14 15:59:00
cvelist
cvelist
CVE-2015-0519
2015-02-14 15:00:00
6.6 Medium
AI Score
Confidence
Low
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
0.0004 Low
EPSS
Percentile
5.2%
Related for CVE-2015-0519