Lucene search

K
nvd[email protected]NVD:CVE-2004-2436
HistoryDec 31, 2004 - 5:00 a.m.

CVE-2004-2436

2004-12-3105:00:00
web.nvd.nist.gov

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

Computer Associates Unicenter Common Services 3.0 and earlier stores the database “SA” password in cleartext in the TndAddNspTmp.bat file, which could allow local users to gain privileges.

Affected configurations

NVD
Node
broadcomcommon_servicesMatch1.0
OR
broadcomcommon_servicesMatch1.1
OR
broadcomcommon_servicesMatch2.0
OR
broadcomcommon_servicesMatch2.1
OR
broadcomcommon_servicesMatch2.2
OR
broadcomcommon_servicesMatch3.0
OR
broadcomunicenter_network_and_systems_managementMatch3.0
OR
broadcomunicenter_serviceplus_service_deskMatch6.0

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

Related for NVD:CVE-2004-2436