Unscored severity · published Oct 13, 2007
CVE-2007-5439
CA (formerly Computer Associates) eTrust ITM (Threat Manager) 8.1 stores sensitive user information in log files with predictable names, which allows remote attackers to obtain…
–
CVSS
2.3%
EPSS
No
On KEV
Description
CA (formerly Computer Associates) eTrust ITM (Threat Manager) 8.1 stores sensitive user information in log files with predictable names, which allows remote attackers to obtain this information via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.3% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EI
Etrust Integrated Threat Management · Broadcom
8.1 · source: NVD
Affected product
EI
Etrust Integrated Threat Management
Broadcom
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-5439
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-5439
osvdb.org
http://osvdb.org/43487
securityreason.com
http://securityreason.com/securityalert/3219
Vendor Advisory
http://www.eleytt.com/advisories/eleytt_ETRUSTITM1.pdf
www.securityfocus.com
http://www.securityfocus.com/archive/1/482021/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/26012
More from Etrust Integrated Threat Management
–
CVE-2009-3588
Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8)…
–
CVE-2009-3587
Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8)…
–
CVE-2007-5437
The web console in CA (formerly Computer Associates) eTrust ITM (Threat Manager) 8.1 allows remote attackers to redirect users to arbitrary web sites via a crafted HTTP URL on…
–
CVE-2007-2522
Stack-based buffer overflow in the inoweb Console Server in CA Anti-Virus for the Enterprise r8, Threat Manager r8, Anti-Spyware for the Enterprise r8, and Protection Suites r3…
–
CVE-2005-3653
Heap-based buffer overflow in the iGateway service for various Computer Associates (CA) iTechnology products, in iTechnology iGateway before 4.0.051230, allows remote attackers to…