First published: Wed Mar 02 2005(Updated: )
Computer Associates (CA) Unicenter Asset Management (UAM) 4.0 does not properly initialize the "Change Credentials for Database" window, which allows local users to recover the SQL Admin password via certain methods.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
CA Unicenter DSM Agent | =4.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2005-0640 has a medium severity rating due to the potential exposure of sensitive database credentials.
To fix CVE-2005-0640, you should update to the latest version of CA Unicenter Asset Management that addresses this vulnerability.
CVE-2005-0640 affects local users of CA Unicenter Asset Management version 4.0 who have access to the 'Change Credentials for Database' window.
The impact of CVE-2005-0640 allows local users to recover SQL Admin passwords, potentially leading to unauthorized access to the database.
CVE-2005-0640 is not remotely exploitable as it requires local user access to the system to exploit the vulnerability.