CVE-2007-5439

CA eTrust ITM 8.1 - Exposure of Sensitive Information via Predictable Log File Names

Title source: llm
STIX 2.1

Description

CA (formerly Computer Associates) eTrust ITM (Threat Manager) 8.1 stores sensitive user information in log files with predictable names, which allows remote attackers to obtain this information via unspecified vectors.

References (5)

Core 5
Core References
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/3219
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/26012
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/43487
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/482021/100/0/threaded

Scores

EPSS 0.0054
EPSS Percentile 67.9%

Details

CWE
CWE-200 CWE-264
Status published
Products (1)
broadcom/etrust_integrated_threat_management 8.1
Published Oct 13, 2007
Tracked Since Feb 18, 2026