1. Home
  2. CVE Database
  3. CVE-2011-3685
LOW · 1.9

CVE-2011-3685

Tembria Server Monitor before 6.0.5 Build 2252 uses a substitution cipher to encrypt application credentials, which allows local users to obtain sensitive information by leveraging read access to (1) ...

Vulnerability Description

Tembria Server Monitor before 6.0.5 Build 2252 uses a substitution cipher to encrypt application credentials, which allows local users to obtain sensitive information by leveraging read access to (1) authentication.dat or (2) XML files in the Exports directory.

CVSS Score

1.9

LOW

AV:L/AC:M/Au:N/C:P/I:N/A:N
Confidentiality
PARTIAL
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
TembriaServer Monitor<= 6.0.4

Related Weaknesses (CWE)

CWE-310

References

FAQ

What is CVE-2011-3685?

CVE-2011-3685 is a vulnerability with a CVSS score of 1.9 (LOW). Tembria Server Monitor before 6.0.5 Build 2252 uses a substitution cipher to encrypt application credentials, which allows local users to obtain sensitive information by leveraging read access to (1) ...

How severe is CVE-2011-3685?

CVE-2011-3685 has been rated LOW with a CVSS base score of 1.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2011-3685?

Check the references section above for vendor advisories and patch information. Affected products include: Tembria Server Monitor.