CVE-2006-7163

Published Mar 10, 2007

Last updated 16 years ago

Overview

Description: DreameeSoft Password Master 1.0 stores the database in an unencrypted format when the master password is set, which allows attackers with physical access to read the database contents via an unspecified authentication bypass. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Source: cve@mitre.org
NVD status: Analyzed

Risk scores

CVSS 2.0

Type: Primary
Base score: 6.9
Impact score: 10
Exploitability score: 3.4
Vector string: AV:L/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:dreameesoft:password_master:1.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A12665D5-F5CD-4EB8-9B5F-820BDD1A38E3"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References