Unscored CVE-2001-1550 EUVD-2001-1527GHSA-wwm5-8wf4-3jm6

CentraOne 5.2 and Centra ASP with basic authentication enabled creates world-writable base64 encoded log files, which allows local users to…

Published Jul 14, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

CentraOne 5.2 and Centra ASP with basic authentication enabled creates world-writable base64 encoded log files, which allows local users to obtain cleartext passwords from decoded log files and impersonate users.

Advisories 1

WID-SEC-2024-0521 IBM MQ: Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 15, 2024

References

centraone-log-file-info(7820) vdb-entry
20011226 Dangerous information in CentraOne log files - VENDOR RESPONSE mailing-list
20011217 Dangerous information in CentraOne Log files, possible user impersonation mailing-list
3704 vdb-entry