Database Exposure Vulnerability in SGI Tempo on SGI ICE-X Systems
CVE-2014-7303
7.8HIGH
Summary
SGI Tempo, utilized on SGI ICE-X systems, suffers from a weakness in file permissions which results in local users having the potential to read sensitive information, including password hashes, from the database file etc/dbdump.db. This vulnerability could lead to unauthorized access to critical system data, thereby posing significant security risks to systems using this configuration.
References
CVSS V3.1
Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved