CVE-2010-3584

{"id": "CVE-2010-3584", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:S/C:P/I:P/A:P", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.1, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2010-10-14T18:00:18.430", "references": [{"url": "http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html", "tags": ["Vendor Advisory"], "source": "secalert_us@oracle.com"}, {"url": "http://www.securityfocus.com/archive/1/514612/100/0/threaded", "source": "secalert_us@oracle.com"}, {"url": "http://www.us-cert.gov/cas/techalerts/TA10-287A.html", "tags": ["US Government Resource"], "source": "secalert_us@oracle.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in the Oracle VM component in Oracle VM 2.2.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to ovs-agent. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a third party researcher that this is related to the storage of passwords and password hashes in cleartext in files with insecure permissions."}, {"lang": "es", "value": "Una vulnerabilidad no especificada en el componente OracleVM en VM de Oracle versi\u00f3n 2.2.1, permite a los usuarios locales afectar a la confidencialidad, integridad y disponibilidad por medio de vectores desconocidos relacionados con ovs-agent. NOTA: la informaci\u00f3n anterior fue obtenida de la CPU en octubre de 2010. Oracle no ha comentado sobre las afirmaciones de un investigador externo de que esto est\u00e1 relacionado con el almacenamiento de contrase\u00f1as y hashes de contrase\u00f1as en texto sin cifrar en archivos con permisos no seguros."}], "lastModified": "2018-10-10T20:04:46.897", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:oracle:vm:2.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B14AEFBA-F8D7-4781-8EFA-D152F0D15B1D"}], "operator": "OR"}]}], "sourceIdentifier": "secalert_us@oracle.com"}