VulnerabilityModified
CVE-2010-0124
Employee Timeclock Software 0.99 places the database password on the mysqldump command line, which allows local users to obtain sensitive information by listing the process.
LOW 2.1EPSS 0.37%
Does this matter?
Lower severity and a low EPSS score (0.37%). Track it; it rarely justifies an emergency change on its own.
Description
Employee Timeclock Software 0.99 places the database password on the mysqldump command line, which allows local users to obtain sensitive information by listing the process.
- CVSS 2.0
- 2.1 LOWAV:L/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 0.37% probability · 30th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-255
- Affected
- timeclock-software/employee timeclock software
- Source
- PSIRT-CNA@flexerasoftware.com
References
- http://secunia.com/advisories/38739Vendor Advisory
- http://secunia.com/secunia_research/2010-12/Vendor Advisory
- http://www.osvdb.org/62830
- http://www.securityfocus.com/archive/1/509996/100/0/threaded
- http://www.securityfocus.com/bid/38642
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56800
- http://secunia.com/advisories/38739Vendor Advisory
- http://secunia.com/secunia_research/2010-12/Vendor Advisory
- http://www.osvdb.org/62830
- http://www.securityfocus.com/archive/1/509996/100/0/threaded
- http://www.securityfocus.com/bid/38642
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56800
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.