Vulnerability in Centra Asp
CVE-2001-1550
CentraOne 5.2 and Centra ASP with basic authentication enabled creates world-writable base64 encoded log files, which allows local users to obtain cleartext passwords from decoded log files and impersonate users.
EPSS: 0.004 (29.4th percentile) — read the EPSS interpretation.
Affected products
- Centra Asp
- Centra Centraone — versions 5.2
- Centra Smart_connect — versions cen5.2-03
- N/a — versions n/a
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (Vendor Advisory, mailing-list, Patch, x_refsource_NTBUGTRAQ)
- cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_VULNWATCH)
- cve@mitre.org (vdb-entry, x_refsource_BID)