2.1
CVE-2012-0959
- EPSS 0.4%
- Veröffentlicht 24.11.2012 20:55:01
- Zuletzt bearbeitet 16.06.2026 23:38:34
- Quelle security@ubuntu.com
- CVE-Watchlists
- Unerledigt
LoginRemote Login Service (RLS) 1.0.0 does not properly clear account information when switching users, which might allow physically proximate users to obtain login credentials.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Remote Login Service Hackers ≫ Remote Login Service Version1.0.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.4% | 0.311 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 2.1 | 3.9 | 2.9 |
AV:L/AC:L/Au:N/C:P/I:N/A:N
|
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
http://www.ubuntu.com/usn/USN-1624-1
https://bugs.launchpad.net/remote-login-service/%2Bbug/1070896
https://exchange.xforce.ibmcloud.com/vulnerabilities/80278