Axalto Protiva Local Information Disclosure Vulnerability
BID:20755
Info
Axalto Protiva Local Information Disclosure Vulnerability
| Bugtraq ID: | 20755 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Oct 26 2006 12:00AM |
| Updated: | Oct 27 2006 05:23PM |
| Credit: | The discovery of this issue is credited to nnposter. |
| Vulnerable: |
Axalto Protiva 1.1 |
| Not Vulnerable: | |
Discussion
Axalto Protiva Local Information Disclosure Vulnerability
Axalto Protiva is prone to a local information-disclosure vulnerability because the application fails to protect sensitive information from unprivileged users.
A user who can gain local, interactive access to affected computers may exploit this issue to access credentials stored by the application. Information harvested by exploiting this issue will aid the attacker in further attacks. By compromising the information store of affected services, the attacker may potentially gain unauthorized access to any computer or device that is configured to use the affected service as an authentication source.
Axalto Protiva 1.1 is vulnerable to this issue; other versions may also be affected.
Axalto Protiva is prone to a local information-disclosure vulnerability because the application fails to protect sensitive information from unprivileged users.
A user who can gain local, interactive access to affected computers may exploit this issue to access credentials stored by the application. Information harvested by exploiting this issue will aid the attacker in further attacks. By compromising the information store of affected services, the attacker may potentially gain unauthorized access to any computer or device that is configured to use the affected service as an authentication source.
Axalto Protiva 1.1 is vulnerable to this issue; other versions may also be affected.
Exploit / POC
Axalto Protiva Local Information Disclosure Vulnerability
Attackers use readily available utilities to exploit this issue.
Attackers use readily available utilities to exploit this issue.
Solution / Fix
Axalto Protiva Local Information Disclosure Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].
References
Axalto Protiva Local Information Disclosure Vulnerability
References:
References: