CVE-2006-3663 Information disclosure in n/a

Medium 4.6 Published Updated

Local attackers can read plaintext passwords from backup files to gain elevated privileges on Finjan Vital Security Appliances.

Exploited in the wild
Not known
Login needed
Any signed-in user
Attackable
Local or same network only
Victim action needed
Not needed
Fix
None listed

What is CVE-2006-3663?

CVE-2006-3663 is a medium-severity vulnerability in n/a, published on 17 Jul 2006. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Finjan Vital Security Appliance 5100/8100 NG 8.3.5 stores passwords in plaintext in a backup file, which allows local users to gain privileges. NOTE: the vendor has notified CVE that this issue was fixed in 8.3.6.

Which versions are affected by CVE-2006-3663?

It affects 1 product.

Products include Finjan Vital Security.

How do I fix CVE-2006-3663?

No fix has been published for CVE-2006-3663 yet. Limit exposure of the affected software until one is available.

Is CVE-2006-3663 being exploited?

There is no known exploitation of CVE-2006-3663 in the wild and no public exploit code.

Sources

Also known as GHSA-724g-4hc2-8gf6.

Is CVE-2006-3663 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free