CVE-2004-2436

3 documents3 sources
Severity
2.1LOW
EPSS
0.1%
top 76.14%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Broadcom Common ServicesBroadcom Unicenter Network AND Systems ManagementBroadcom Unicenter Serviceplus Service Desk
Timeline
PublishedDec 31
Latest updateApr 29

Description

Computer Associates Unicenter Common Services 3.0 and earlier stores the database "SA" password in cleartext in the TndAddNspTmp.bat file, which could allow local users to gain privileges.

CVSS vector

AV:L/AC:L/C:P/I:N/A:NExploitability: 3.9 | Impact: 2.9

Affected Packages3 packages

▶NVDbroadcom/common_services6 versions+5

Patches

Patch: www.securityfocus.com ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-j3vf-mm32-hh2j: Computer Associates Unicenter Common Services 3↗2022-04-29
▶
CVEList
CVE-2004-2436: Computer Associates Unicenter Common Services 3↗2005-08-20
▶
CVE-2004-2436 (LOW CVSS 2.1) | Computer Associates Unicenter Commo | cvebase.io