Lucene search

K
cveMitreCVE-2007-2619
HistoryMay 11, 2007 - 4:19 p.m.

CVE-2007-2619

2007-05-1116:19:00
mitre
web.nvd.nist.gov
29
symantec
pcanywhere
login credentials
unencrypted
process memory
vulnerability

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:S/C:C/I:N/A:N

AI Score

6.3

Confidence

Low

EPSS

0.001

Percentile

21.2%

Symantec pcAnywhere 11.5.x and 12.0.x retains unencrypted login credentials for the most recent login within process memory, which allows local administrators to obtain the credentials by reading process memory, a different vulnerability than CVE-2006-3785.

Affected configurations

Nvd
Node
symantecpcanywhereMatch11.5
OR
symantecpcanywhereMatch11.5.1
OR
symantecpcanywhereMatch12.0
VendorProductVersionCPE
symantecpcanywhere11.5cpe:2.3:a:symantec:pcanywhere:11.5:*:*:*:*:*:*:*
symantecpcanywhere11.5.1cpe:2.3:a:symantec:pcanywhere:11.5.1:*:*:*:*:*:*:*
symantecpcanywhere12.0cpe:2.3:a:symantec:pcanywhere:12.0:*:*:*:*:*:*:*

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:S/C:C/I:N/A:N

AI Score

6.3

Confidence

Low

EPSS

0.001

Percentile

21.2%

Related for CVE-2007-2619