CVE-2011-1655

Currently unrated

Key Information:

Vendor
Broadcom
Status
Total Defense
Vendor
CVE Published:
18 April 2011

Summary

The management.asmx module in the Management Web Service in the Unified Network Control (UNC) Server in CA Total Defense (TD) r12 before SE2 sends a cleartext response to unspecified getDBConfigSettings requests, which makes it easier for remote attackers to obtain database credentials, and subsequently execute arbitrary code, by sniffing the network, related to the UNCWS Web Service.

References

http://www.securityfocus.com/archive/1/517492/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/44097
third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2011/0977
vdb-entryx_refsource_VUPEN

EPSS Score

95% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.