CVE-1999-1280: High severity Hummingbird Exceed vulnerability
Hummingbird Exceed 6.0.1.0 inadvertently includes a DLL that was meant for development and testing, which logs user names and passwords in cleartext in the test.log file.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Hummingbird Exceed 6.0.1.0from your environment.Remove the development/testing DLL that was inadvertently included with Hummingbird Exceed 6.0.1.0 (the DLL that writes credentials to test.log). Delete or uninstall that DLL from affected systems.
- Operational
Locate any test.log files produced by the included DLL, securely delete or quarantine those log files, and rotate any user credentials that may have been exposed in cleartext.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1280?
CVE-1999-1280 is considered a high severity vulnerability due to the exposure of sensitive user information.
How do I fix CVE-1999-1280?
To fix CVE-1999-1280, users should upgrade to a fixed version of Hummingbird Exceed that does not include the vulnerable DLL.
What does CVE-1999-1280 affect?
CVE-1999-1280 affects Hummingbird Exceed version 6.0.1.0.
What data is compromised in CVE-1999-1280?
CVE-1999-1280 compromises user credentials by logging usernames and passwords in cleartext in the test.log file.
Is there a workaround for CVE-1999-1280?
There is no recommended workaround for CVE-1999-1280 other than upgrading to a secure version of the software.