CVE-2007-5439

Published: Oct 13, 2007Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

CA (formerly Computer Associates) eTrust ITM (Threat Manager) 8.1 stores sensitive user information in log files with predictable names, which allows remote attackers to obtain this information via unspecified vectors.

Affected (1)

Products: Broadcom: Etrust Integrated Threat Management

Broadcom

1 product

Etrust Integrated Threat Management

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Broadcom Etrust Integrated Threat Management	Version 8.1

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

CWE-264

References (10)

http://osvdb.org/43487

Source: cve@mitre.org

http://securityreason.com/securityalert/3219

Source: cve@mitre.org

http://www.eleytt.com/advisories/eleytt_ETRUSTITM1.pdf

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/archive/1/482021/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/26012

Source: cve@mitre.org

http://osvdb.org/43487