Information disclosure in Vmware Hyperic Hq

CVE-2009-2899

The monitor perl script in the Sybase database plug-in in SpringSource Hyperic HQ before 4.3 allows local users to obtain the database password by listing the process and its arguments.

Vulnerability class: Information Disclosure

EPSS: 0.004 (30.2th percentile) — read the EPSS interpretation.

Affected products

Vmware Hyperic_hq
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

secalert@redhat.com (x_refsource_MISC)
secalert@redhat.com (x_refsource_MISC)
secalert@redhat.com (x_refsource_CONFIRM, Vendor Advisory)