2.1

CVE-2015-3999

Piriform CCleaner 3.26.0.1988 through 5.02.5101 writes the filenames to disk when overwriting files, which allows local users to obtain sensitive information by searching unallocated disk space.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Piriform ≫ Ccleaner Version 3.26.1888
Piriform ≫ Ccleaner Version 3.27.1900
Piriform ≫ Ccleaner Version 3.28.1913
Piriform ≫ Ccleaner Version 4.00.4064
Piriform ≫ Ccleaner Version 4.01.4093
Piriform ≫ Ccleaner Version 4.02.4115
Piriform ≫ Ccleaner Version 4.03.4151
Piriform ≫ Ccleaner Version 4.04.4197
Piriform ≫ Ccleaner Version 4.05.4250
Piriform ≫ Ccleaner Version 4.06.4324
Piriform ≫ Ccleaner Version 4.07.4369
Piriform ≫ Ccleaner Version 4.08.4428
Piriform ≫ Ccleaner Version 4.09.4471
Piriform ≫ Ccleaner Version 4.10.4570
Piriform ≫ Ccleaner Version 4.11.4619
Piriform ≫ Ccleaner Version 4.12.4657
Piriform ≫ Ccleaner Version 4.13.4693
Piriform ≫ Ccleaner Version 4.14.4707
Piriform ≫ Ccleaner Version 4.15.4725
Piriform ≫ Ccleaner Version 4.16.4763
Piriform ≫ Ccleaner Version 4.17.4808
Piriform ≫ Ccleaner Version 4.18.4844
Piriform ≫ Ccleaner Version 4.19.4867
Piriform ≫ Ccleaner Version 5.00.5050
Piriform ≫ Ccleaner Version 5.01.5075
Piriform ≫ Ccleaner Version 5.02.5101
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.52% 0.402
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://seclists.org/fulldisclosure/2015/May/72
http://www.securityfocus.com/bid/74714