Description (CNA)
Symantec pcAnywhere 11.5.x and 12.0.x retains unencrypted login credentials for the most recent login within process memory, which allows local administrators to obtain the credentials by reading process memory, a different vulnerability than CVE-2006-3785.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34203
- http://www.vupen.com/english/advisories/2007/1753
- http://osvdb.org/41982
- http://securityresponse.symantec.com/avcenter/security/Content/2007.05.09b.html
- http://securitytracker.com/id?1018032
- http://www.securityfocus.com/bid/23875
ADP enrichment
No English description supplied.