CVE-2011-3685

2022-10-0316:15:05

mitre

www.cve.org

tembria server monitor

encryption

vulnerability

sensitive information

local users

authentication.dat

xml files

exports directory

5.6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

Tembria Server Monitor before 6.0.5 Build 2252 uses a substitution cipher to encrypt application credentials, which allows local users to obtain sensitive information by leveraging read access to (1) authentication.dat or (2) XML files in the Exports directory.