NVD

Id
55849  
Name
CVE-2007-3700  
Description
Sun Java System Access Manager (formerly Java System Identity Server) before 20070710, when the message debug level is configured in the com.iplanet.services.debug.level property in AMConfig.properties, logs cleartext login passwords, which allows local users to gain privileges by reading /var/opt/SUNWam/debug/amAuth.  
Reject
 
CVSS Version
2  
CVSS Score
1.7  
Severity
Low  
CVSS Base Score
1.7  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.1  
CVSS Vector
(AV:L/AC:L/Au:S/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2007-07-11  
Modified Date
2011-03-07  
Seq
2007-3700  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
283956 55849 CVE-2007-3700 101918  View
283957 55849 CVE-2007-3700 200386  View
283958 55849 CVE-2007-3700 24859  View
283959 55849 CVE-2007-3700 1018370  View
283960 55849 CVE-2007-3700 ADV-2007-2496  View
283961 55849 CVE-2007-3700 sun-jsam-message-information-disclosure(35339)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57158 JVNDB-2007-005850 Sun Java System Access Manager における権限を取得される脆弱性 Sun Java System Access Manager (前 Java System Identity Server) は、AMConfig.properties 内のcom.iplanet.services.debug.level プロパティでメッセージのデバッグレベルが設定されている際、ログインパスワードを平文で記録しているため、権限を取得される脆弱性が存在します。 CVE-2007-3700 27055 CVE-2007-3700 55849 1.7 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005850.html 2007-07-10 2012-12-20 View