Vulnerability Description
Eastman Work Management 3.21 stores passwords in cleartext in the COMMON and LOCATOR registry keys, which could allow local users to gain privileges.
CVSS Score
4.6
MEDIUM
AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Eastman Software | Work Management | 3.2.1 |
References
- http://marc.info/?l=ntbugtraq&m=93034788412494&w=2
- http://www.securityfocus.com/bid/485Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/2303
- http://marc.info/?l=ntbugtraq&m=93034788412494&w=2
- http://www.securityfocus.com/bid/485Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/2303
FAQ
What is CVE-1999-1470?
CVE-1999-1470 is a vulnerability with a CVSS score of 4.6 (MEDIUM). Eastman Work Management 3.21 stores passwords in cleartext in the COMMON and LOCATOR registry keys, which could allow local users to gain privileges.
How severe is CVE-1999-1470?
CVE-1999-1470 has been rated MEDIUM with a CVSS base score of 4.6/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-1999-1470?
Check the references section above for vendor advisories and patch information. Affected products include: Eastman Software Work Management.