CVE-2007-5439

CWE-200 — Information ExposureCWE-2643 documents3 sources
Severity
5.0MEDIUM
EPSS
0.5%
top 32.33%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Broadcom Etrust Integrated Threat Management
Timeline
PublishedOct 13
Latest updateMay 1

Description

CA (formerly Computer Associates) eTrust ITM (Threat Manager) 8.1 stores sensitive user information in log files with predictable names, which allows remote attackers to obtain this information via unspecified vectors.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-4g35-r4h2-vfq3: CA (formerly Computer Associates) eTrust ITM (Threat Manager) 8↗2022-05-01
▶
CVEList
CVE-2007-5439: CA (formerly Computer Associates) eTrust ITM (Threat Manager) 8↗2007-10-13
▶
CVE-2007-5439 (MEDIUM CVSS 5) | CA (formerly Computer Associates) e | cvebase.io