Credant Mobile Guardian Shield Information Disclosure Vulnerability

Bugtraq ID:	24139
Class:	Origin Validation Error
CVE:	CVE-2007-2883
Remote:	Yes
Local:	No
Published:	May 24 2007 12:00AM
Updated:	Jun 04 2007 08:20PM
Credit:	Mike Iacovacci discovered this vulnerability.
Vulnerable:	Credant Credant Mobile Guardian Shield for Windows 5.2.1.105
Not Vulnerable:	Credant Credant Mobile Guardian Shield for Windows 5.2.1.125

Credant Mobile Guardian Shield Information Disclosure Vulnerability

Credant Mobile Guardian Shield is prone to an information-disclosure vulnerability because it stores sensitive password information in plain text.

This issue affects Credant Mobile Guardian Shield 5.2.1.105 and prior versions.

Credant Mobile Guardian Shield Information Disclosure Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

Credant Mobile Guardian Shield Information Disclosure Vulnerability

Solution:
The vendor has addressed this issue in patch version 5.2.1.125; please contact the vendor for information on obtaining fixes.

Credant Mobile Guardian Shield Information Disclosure Vulnerability

References:

• Credant Mobile Guardian Shield (Credant)
  
• Vulnerability in Credant Mobile Guardian Shield for Windows ([email protected])
  
• Vulnerability Note VU#821865 - CREDANT Mobile Guardian Shield fails to remove cr (US-CERT)