CVE-2006-5600 - Canadian Satisfaction

Description

Axalto Protiva 1.1 possibly only non-commercial versions stores passwords in plaintext in files with insecure permissions which allows local users to gain privileges by reading the passwords from (1) KeyTool\keytool.config or (2) webapps\protiva\WEB-INF\classes\authserver.config.

Reference

http://www.securityfocus.com/bid/20755 http://securityreason.com/securityalert/1793 https://exchange.xforce.ibmcloud.com/vulnerabilities/29839 http://www.securityfocus.com/archive/1/449891/100/0/threaded