Information disclosure

2007-03-1922:19:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

Fujitsu FENCE-Pro before V5L01, and Systemwalker Desktop Encryption V12.0L10, V12.0L10A, V12.0L10B, V12.0L20 and V13.0.0 allows local users to obtain sensitive information by extracting the decoding password from certain “self-decoding” file types.

CPENameOperatorVersion
fenceeq3 pro
fenceeq2 pro
fenceeq4 pro
systemwalker_desktop_encryptioneq12.0l20-v
systemwalker_desktop_encryptioneq13.0.118
systemwalker_desktop_encryptioneq12.0l10-v
systemwalker_desktop_encryptioneq12.0l10a-v
systemwalker_desktop_encryptioneq12.0l10b-v

Name	Operator	Version
fence	eq	3 pro
fence	eq	2 pro
fence	eq	4 pro
systemwalker_desktop_encryption	eq	12.0l20-v
systemwalker_desktop_encryption	eq	13.0.118
systemwalker_desktop_encryption	eq	12.0l10-v
systemwalker_desktop_encryption	eq	12.0l10a-v
systemwalker_desktop_encryption	eq	12.0l10b-v

References

jvn.jp/jp/JVN%2319795972/index.html

osvdb.org/34184

secunia.com/advisories/24537

secunia.com/advisories/24549

segroup.fujitsu.com/secure/products/fence/notice/alert20070316.html

software.fujitsu.com/jp/security/products-fujitsu/solution/systemwalker_dte_200701.html

www.securityfocus.com/bid/23001

exchange.xforce.ibmcloud.com/vulnerabilities/33029