CVE Catalog

CVE-1999-1322

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
1.50%

71th percentile - higher than 71% of all known CVEs

Summary

The installation of 1ArcServe Backup and Inoculan AV client modules for Exchange creates a log file, exchverify.log, which contains usernames and passwords in plaintext.

Risk Assessment

Storing credentials in plaintext poses a risk of unauthorized access to systems and sensitive data.

Recommendation

It is recommended to secure the log file by encrypting it or restricting access to minimize the risk of data leakage.

Original NVD description (English source)

The installation of 1ArcServe Backup and Inoculan AV client modules for Exchange create a log file, exchverify.log, which contains usernames and passwords in plaintext.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS