Lucene search
HistoryOct 03, 2022 - 4:24 p.m.
CVE-2009-2899
cve-2009-2899
sybase database
springsource
hyperic hq
password protection
process listing
security vulnerability
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
6.5 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
The monitor perl script in the Sybase database plug-in in SpringSource Hyperic HQ before 4.3 allows local users to obtain the database password by listing the process and its arguments.
Affected configurations
Node
vmwarehyperic_hqRange≤4.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| vmware:hyperic_hq | vmware hyperic hq | le | 4.2 |
Related
nvd
nvd
CVE-2009-2899
2012-12-05 17:55:00
cvelist
cvelist
CVE-2009-2899
2022-10-03 16:24:05
prion
prion
Default credentials
2012-12-05 17:55:00
ibm
ibm
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
6.5 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2009-2899