CVE-2005-0640

3 documents3 sources
Severity
4.6MEDIUM
EPSS
0.1%
top 83.35%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Broadcom Unicenter Asset Management
Timeline
PublishedMar 2
Latest updateMay 1

Description

Computer Associates (CA) Unicenter Asset Management (UAM) 4.0 does not properly initialize the "Change Credentials for Database" window, which allows local users to recover the SQL Admin password via certain methods.

CVSS vector

AV:L/AC:L/C:P/I:P/A:PExploitability: 3.9 | Impact: 6.4

Affected Packages1 packages

Patches

Patch: secunia.com ↗Patch: supportconnect.ca.com ↗Patch: secunia.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-8r2m-2r3g-c4fc: Computer Associates (CA) Unicenter Asset Management (UAM) 4↗2022-05-01
▶
CVEList
CVE-2005-0640: Computer Associates (CA) Unicenter Asset Management (UAM) 4↗2005-03-04
▶
CVE-2005-0640 (MEDIUM CVSS 4.6) | Computer Associates (CA) Unicenter | cvebase.io