Lucene search
HistoryMay 16, 2005 - 4:00 a.m.
CVE-2005-1606
CVSS2
4.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.3
Confidence
Low
EPSS
0
Percentile
0.4%
H-Sphere Winbox 2.4.2 and 2.4.3 RC1 stores sensitive information such as username and password in plaintext in world-readable log files, which allows local users to gain privileges.
Affected configurations
Node
positive_softwareh-sphere_winboxMatch2.4.2_patch_4
ORpositive_softwareh-sphere_winboxMatch2.4.3_rc1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| positive_software | h-sphere_winbox | 2.4.2_patch_4 | cpe:2.3:a:positive_software:h-sphere_winbox:2.4.2_patch_4:*:*:*:*:*:*:* |
| positive_software | h-sphere_winbox | 2.4.3_rc1 | cpe:2.3:a:positive_software:h-sphere_winbox:2.4.3_rc1:*:*:*:*:*:*:* |
Related
exploitdb
exploitdb
Positive Software H-Sphere Winbox 2.4 - Sensitive Logfile Content Disclosure
2005-05-09 00:00:00
cve
cve
CVE-2005-1606
2005-05-16 04:00:00
cvelist
cvelist
CVE-2005-1606
2005-05-16 04:00:00
CVSS2
4.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.3
Confidence
Low
EPSS
0
Percentile
0.4%
Related for NVD:CVE-2005-1606