Vulnerability CVE-2007-2883


Published: 2007-05-29   Modified: 2012-02-12

Description:
Credant Mobile Guardian Shield for Windows 5.2.1.105 and earlier stores account names and passwords in plaintext in memory, which allows local users to obtain sensitive information by (1) reading the paging file or (2) dumping and searching the memory image. NOTE: This issue crosses privilege boundaries because the product is intended to protect the data on a stolen computer.

See advisories in our WLB2 database:
Topic
Author
Date
Med.
Vulnerability in Credant Mobile Guardian Shield for Windows
Mike Iacovacci
05.06.2007

Type:

CWE-Other

CVSS2 => (AV:L/AC:L/Au:N/C:P/I:P/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
4.6/10
6.4/10
3.9/10
Exploit range
Attack complexity
Authentication
Local
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
Partial
Affected software
Credant -> Credant mobile guardian shield - windows 

 References:
http://securityreason.com/securityalert/2753
http://www.kb.cert.org/vuls/id/821865
http://www.securityfocus.com/archive/1/469486/100/0/threaded
http://www.securityfocus.com/bid/24139
https://exchange.xforce.ibmcloud.com/vulnerabilities/34487

Copyright 2024, cxsecurity.com

 

Back to Top