CVE-2001-1550 CentraOne 5.2 and Centra ASP with basic authentication enabled creates world-writable base64 encoded log files, which allows local users to obtain cleartext passwords from decoded log files and impers...
LowCVSS 2.1
EPSS 0.37%
- Published
- Updated
- Exploit status
- No public exploit known
Description
CentraOne 5.2 and Centra ASP with basic authentication enabled creates world-writable base64 encoded log files, which allows local users to obtain cleartext passwords from decoded log files and impersonate users.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| centra asp | All versions | No fix listed |
| centraone | = 5.2 | No fix listed |
| centra smart connect | = cen5.2-03 | No fix listed |
References
- 20011226 Dangerous information in CentraOne log files - VENDOR RESPONSE mailing-list patch vendor-advisory
- 20011217 Dangerous information in CentraOne Log files, possible user impersonation mailing-list vendor-advisory
- 3704 vdb-entry
- centraone-log-file-info(7820) vdb-entry