vulnwire
2.1low

CVE-2004-2436

Computer Associates Unicenter Common Services 3.0 and earlier stores the database "SA" password in cleartext in the TndAddNspTmp.bat file,…

Published 21 y ago · modified 4 mo ago · JSON

CVSS
2.1
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.5%
percentile 41%
Public exploits
0
none known

Computer Associates Unicenter Common Services 3.0 and earlier stores the database "SA" password in cleartext in the TndAddNspTmp.bat file, which could allow local users to gain privileges.

Exploit prediction (EPSS)

0.47% probability of exploitation in the next 30 days, higher than 41% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.02.1AV:L/AC:L/Au:N/C:P/I:N/A:N

References

  • osvdb.org /displayvuln.php?osvdb_id=10408 · vdb-entry, x_refsource_OSVDB, x_transferred
  • secunia.com /advisories/12639/ · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • securitytracker.com /id?1011468 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • securityfocus.com /bid/11277 · vdb-entry, x_refsource_BID, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/17562 · vdb-entry, x_refsource_XF, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.