Vulnerabilities > CVE-2006-5965 - Local Insecure Default Directory Permisions vulnerability in Passgo SSO Plus 2.1.0.32

047910
CVSS 4.6 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
local
low complexity
passgo
NVD
Published: 2006-11-26
Updated: 2018-10-17

Summary

PassGo SSO Plus 2.1.0.32, and probably earlier versions, uses insecure permissions (Everyone/Full Control) for the PassGo Technologies directory, which allows local users to gain privileges by modifying critical programs.

Vulnerable Configurations

Part Description Count
Application
Passgo
1

References