Axalto Protiva 本地安全信息泄露漏洞

QQ空间 新浪微博 微信 QQ facebook twitter
漏洞ID 1193040 漏洞类型 设计错误
发布时间 2006-10-27 更新时间 2006-11-02
CVE编号 CVE-2006-5600 CNNVD-ID CNNVD-200610-490
漏洞平台 N/A CVSS评分 2.1
|漏洞来源
https://cxsecurity.com/issue/WLB-2006100155
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200610-490
|漏洞详情
AxaltoProtiva1.1(可能只是非商用版本),在安全权限较弱的文件中以纯文本形式存储密码,本地用户可以通过从(1)KeyTool\keytool.config或(2)webapps\protiva\WEB-INF\classes\authserver.config读取密码来获得权限。
|漏洞EXP
Insecure storage of passwords in Axalto Protiva

Critical: Less critical
Impact: Exposure of sensitive information
Where: Local system

Software: Axalto Protiva 1.1
http://www.protiva.axalto.com/
(Note: Vendor claims that it impacts only "non-commercial" versions or whatever that means in reality.)

Description: A vulnerability has been identified in Axalto Protiva, which can be exploited by malicious, local users to gain knowledge and manipulate sensitive information.

The vulnerability is caused due to storing application passwords as plaintext in files that are by default readable by all non-privileged users:

Keystore password in
(application directory)KeyToolkeytool.config

Keystore password and Active Directory LDAP access credentials in
(Tomcat directory)webappsprotivaWEB-INFclassesauthserver.config

The vulnerability has been identified in version 1.1. However, other versions may be also affected.

Solution:
Set proper ACLs on the application directories. Restrict local login rights to privileged users.

Found by:
nnposter
|参考资料

来源:BID
名称:20755
链接:http://www.securityfocus.com/bid/20755
来源:BUGTRAQ
名称:20061026InsecurestorageofpasswordsinAxaltoProtiva
链接:http://www.securityfocus.com/archive/1/archive/1/449891/100/0/threaded
来源:XF
名称:axalto-password-information-disclosure(29839)
链接:http://xforce.iss.net/xforce/xfdb/29839
来源:SREASON
名称:1793
链接:http://securityreason.com/securityalert/1793