CVE-2011-3198 in Domain Technologie Control

Résumé

par MITRE

Domain Technologie Control (DTC) before 0.34.1 includes a password in the -b command line argument to htpasswd, which might allow local users to read the password by listing the process and its arguments.

Once again VulDB remains the best source for vulnerability data.

• Réserver: 19/08/2011
• Divulgation: 21/03/2014
• Modérer: accepté
• Entrée: VDB-66730
• CPE: prêt
• CWE: CWE-255 (confirmé)
• CVSS: 2.1 (NVD)
• EPSS: 0.00071
• KEV: non
• Activités: faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2011-3198
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2011-3198
• CVE Details: https://www.cvedetails.com/cve/CVE-2011-3198/