Description
The keystore file in Unicore Client before 5.6 build 5, when running on Unix systems, has insecure default permissions, which allows local users to obtain sensitive information.
Metrics
CVSS 2.0 2.1/10
AV:L/AC:L/Au:N/C:P/I:N/A:NAffected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://secunia.com/advisories/22765Patch, Vendor Advisory
- http://sourceforge.net/project/shownotes.php?release_id=461942Patch
- http://www.securityfocus.com/bid/20981
- http://www.vupen.com/english/advisories/2006/4419
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30157
- http://secunia.com/advisories/22765Patch, Vendor Advisory
- http://sourceforge.net/project/shownotes.php?release_id=461942Patch
- http://www.securityfocus.com/bid/20981
- http://www.vupen.com/english/advisories/2006/4419
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30157
Timeline
- Published
- Nov 10, 2006
- Last modified
- Jun 16, 2026
- NVD status
- Modified