Database Exposure Vulnerability in SGI Tempo on SGI ICE-X Systems
CVE-2014-7303

7.8HIGH

Key Information:

Vendor
HP
Status
Vendor
CVE Published:
27 January 2020

Summary

SGI Tempo, utilized on SGI ICE-X systems, suffers from a weakness in file permissions which results in local users having the potential to read sensitive information, including password hashes, from the database file etc/dbdump.db. This vulnerability could lead to unauthorized access to critical system data, thereby posing significant security risks to systems using this configuration.

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.