CVE-2004-2436

LOW 2.1CVE-2004-2436 · Published 31/12/2004 · updated 16/06/2026

In short

CVE-2004-2436 is a LOW (CVSS 2.1) vulnerability affecting common services (broadcom), unicenter network and systems management (broadcom), unicenter serviceplus service desk (broadcom).
Chance of exploitation in the next 30 days (EPSS): 0.47%, higher than 40.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
common services broadcom	`= 1.0= 1.1= 2.0= 2.1= 2.2= 3.0`	No fix yet
unicenter network and systems management broadcom	`= 3.0`	No fix yet
unicenter serviceplus service desk broadcom	`= 6.0`	No fix yet

Description

Computer Associates Unicenter Common Services 3.0 and earlier stores the database "SA" password in cleartext in the TndAddNspTmp.bat file, which could allow local users to gain privileges.

References

osvdb.org/displayvuln.php
secunia.com/advisories/12639 · Vendor Advisory
securitytracker.com/id
securityfocus.com/bid/11277 · Patch
exchange.xforce.ibmcloud.com/vulnerabilities/17562

More vulnerabilities in common services

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

In short

CVE-2004-2436 is a LOW (CVSS 2.1) vulnerability affecting common services (broadcom), unicenter network and systems management (broadcom), unicenter serviceplus service desk (broadcom).

Chance of exploitation in the next 30 days (EPSS): 0.47%, higher than 40.8% of all vulnerabilities.

No patched version is listed yet: follow the vendor's advisory in References.

Package

Affected versions

Patched versions

common services

broadcom

= 1.0= 1.1= 2.0= 2.1= 2.2= 3.0

No fix yet

unicenter network and systems management

broadcom

= 3.0

No fix yet

unicenter serviceplus service desk

broadcom

= 6.0

No fix yet

More vulnerabilities in common services

See all →