Lucene search
HistoryAug 17, 2006 - 12:04 a.m.
CVE-2006-4186
nvd
cve-2006-4186
imanager
edirectory
plaintext passwords
security vulnerability
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
6.5 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
19.8%
The iManager in eMBoxClient.jar in Novell eDirectory 8.7.3.8 writes passwords in plaintext to a log file, which allows local users to obtain passwords by reading the file.
Affected configurations
Node
novelledirectoryMatch8.7.3.8
| CPE | Name | Operator | Version |
|---|---|---|---|
| novell:edirectory | novell edirectory | eq | 8.7.3.8 |
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
6.5 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
19.8%
Related for CVE-2006-4186