CVE-2007-4150

{"id": "CVE-2007-4150", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2007-08-03T20:17:00.000", "references": [{"url": "http://osvdb.org/46979", "tags": ["Broken Link"], "source": "cve@mitre.org"}, {"url": "http://www.portcullis.co.uk/uplds/advisories/vapassword%20-%2006-042.txt", "tags": ["Broken Link", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/25153", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "http://osvdb.org/46979", "tags": ["Broken Link"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.portcullis.co.uk/uplds/advisories/vapassword%20-%2006-042.txt", "tags": ["Broken Link", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/25153", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-327"}]}], "descriptions": [{"lang": "en", "value": "The Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12.4.0.0 uses weak cryptography (XOR) when (1) transmitting passwords, which allows remote attackers to obtain sensitive information by sniffing the network; and (2) storing passwords in the configuration file, which allows local users to obtain sensitive information by reading this file."}, {"lang": "es", "value": "El Visionsoft Audit on Demand Service (VSAOD) en Visionsoft Audit 12.4.0.0 utiliza criptograf\u00eda (XOR) d\u00e9bil cuando (1) transmite contrase\u00f1as, lo cual permite a atacantes remotos obtener informaci\u00f3n confidencial al rastrear la red; y (2) almacena contrase\u00f1as en el fichero de configuraci\u00f3n, lo cual permite a usuarios locales obtener informaci\u00f3n confidencial leyendo ese fichero."}], "lastModified": "2024-11-21T00:34:54.087", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:visionsoft:audit:12.4.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "45C6DCDC-A0FF-46DD-81F2-A3B6062DA5F2"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}