CVE Catalog

CVE-1999-1282

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
0.85%

53th percentile - higher than 53% of all known CVEs

Summary

The RealSystem G2 server stores the administrator password in cleartext in a world-readable configuration file, allowing local users to gain administrator privileges.

Risk Assessment

Storing the password in cleartext poses a significant security risk, as any local user can access the administrator account.

Recommendation

It is recommended to secure the configuration file and implement strong password encryption methods to prevent unauthorized access.

Original NVD description (English source)

RealSystem G2 server stores the administrator password in cleartext in a world-readable configuration file, which allows local users to gain privileges.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS