5.5

CVE-2017-8391

The OS Installation Management component in CA Client Automation r12.9, r14.0, and r14.0 SP1 places an encrypted password into a readable local file during operating system installation, which allows local users to obtain sensitive information by reading this file after operating system installation.

Data is provided by the National Vulnerability Database (NVD)
Ca ≫ Client Automation Versionr12.9
   Linux ≫ Linux Kernel
   Microsoft ≫ Windows
Ca ≫ Client Automation Versionr14.0
   Linux ≫ Linux Kernel
   Microsoft ≫ Windows
Ca ≫ Client Automation Versionr14.0 Updatesp1
   Linux ≫ Linux Kernel
   Microsoft ≫ Windows
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.05% 0.145
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:P/I:N/A:N
CWE-732 Incorrect Permission Assignment for Critical Resource

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

http://www.securityfocus.com/bid/98344
Third Party Advisory
VDB Entry