Vulnerability CVE-2005-0640
Published: 2005-03-02   Modified: 2012-02-12

Description:
Computer Associates (CA) Unicenter Asset Management (UAM) 4.0 does not properly initialize the "Change Credentials for Database" window, which allows local users to recover the SQL Admin password via certain methods.

CVSS2 => (AV:L/AC:L/Au:N/C:P/I:P/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
4.6/10
6.4/10
3.9/10
Exploit range
Attack complexity
Authentication
Local
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
Partial
Affected software
CA -> Unicenter asset management 

 References:
http://supportconnect.ca.com/sc/solcenter/solresults.jsp?aparno=Qo64323
http://secunia.com/advisories/14454
Copyright 2024, cxsecurity.com

 

Back to Top