CVE-2006-5303

Secure Computing SafeWord RemoteAccess 2.1 allows local users to obtain the UserCenter webportal password, database encryption keys, and signing keys by reading (1) base-64 encoded data in SERVERS\Web\Tomcat\usercenter\WEB-INF\login.conf and (2) plaintext data in SERVERS\Shared\signers.cfg. NOTE: the provenance of this information is unknown; the details are obtained from third party information.

Score

CVSS 2.0 2.1 Low

Status

Modified - cve@mitre.org

Published

2006-10-17

Last modified

2024-08-07

Affected products

• Safeword Remoteaccess (Securecomputing)

References

• http://secunia.com/advisories/22081
• http://www.securityfocus.com/bid/20509
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29515