CVE-2009-2899

Published: Dec 5, 2012Modified: Apr 29, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

The monitor perl script in the Sybase database plug-in in SpringSource Hyperic HQ before 4.3 allows local users to obtain the database password by listing the process and its arguments.

Affected (1)

Products: Vmware: Hyperic Hq

Vmware

1 product

Hyperic Hq

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Vmware Hyperic Hq	Up to 4.2

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (6)

http://communities.vmware.com/thread/348773

Source: secalert@redhat.com

http://support.springsource.com/security/CVE-2009-2899

Source: secalert@redhat.com

Vendor Advisory

https://jira.hyperic.com/browse/HHQ-1031

Source: secalert@redhat.com

http://communities.vmware.com/thread/348773

Source: af854a3a-2127-422b-91ae-364da2661108

http://support.springsource.com/security/CVE-2009-2899

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://jira.hyperic.com/browse/HHQ-1031

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.