CVE-2006-6145

BASSO 2.1CVE-2006-6145 · Published 28/11/2006 · updated 16/06/2026

In breve

CVE-2006-6145 è una vulnerabilità BASSO (CVSS 2.1) che riguarda crypto-server (cryptocard).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.34%, superiore al 27.2% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
crypto-server cryptocard	`= 6.4.55`	No fix yet

Description

CRYPTOCard CRYPTO-Server before 6.4.56 stores LDAP credentials in plaintext in UninstallerData\installvariables.properties, which has insecure permissions and allows local users to obtain the credentials. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.

References

secunia.com/advisories/22138 · Vendor Advisory
securityfocus.com/bid/21305
vupen.com/english/advisories/2006/4710
exchange.xforce.ibmcloud.com/vulnerabilities/30557

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free