Vulnerabilities > Incomplete Cleanup

DATE CVE VULNERABILITY TITLE RISK
2005-05-24 CVE-2005-1744 Incomplete Cleanup vulnerability in BEA Weblogic Server
BEA WebLogic Server and WebLogic Express 7.0 through Service Pack 5 does not log out users when an application is redeployed, which allows those users to continue to access the application without having to log in again, which may be in violation of newly changed security constraints or role mappings.
network
low complexity
bea CWE-459
critical
9.8
2002-12-31 CVE-2002-2070 Incomplete Cleanup vulnerability in Accessdata Secureclean 3
SecureClean 3 build 2.0 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted.
network
low complexity
accessdata CWE-459
7.5
2002-12-31 CVE-2002-2069 Incomplete Cleanup vulnerability in PGP Personal Privacy
PGP 6.x and 7.x does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted.
network
low complexity
pgp CWE-459
7.5
2002-12-31 CVE-2002-2068 Incomplete Cleanup vulnerability in Tolvanen Eraser 5.3
Eraser 5.3 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted.
network
low complexity
tolvanen CWE-459
7.5
2002-12-31 CVE-2002-2067 Incomplete Cleanup vulnerability in East-Tec Eraser 2002
East-Tec Eraser 2002 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted.
network
low complexity
east-tec CWE-459
7.5
2002-12-31 CVE-2002-2066 Incomplete Cleanup vulnerability in Jetico Bcwipe 1.0.7/2.0/2.35.1
BestCrypt BCWipe 1.0.7 and 2.0 through 2.35.1 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted.
network
low complexity
jetico CWE-459
7.5
2002-08-12 CVE-2002-0788 Incomplete Cleanup vulnerability in PGP Corporate Desktop, Freeware and Personal Security
An interaction between PGP 7.0.3 with the "wipe deleted files" option, when used on Windows Encrypted File System (EFS), creates a cleartext temporary files that cannot be wiped or deleted due to strong permissions, which could allow certain local users or attackers with physical access to obtain cleartext information.
local
low complexity
pgp CWE-459
5.5
2000-06-06 CVE-2000-0552 Incomplete Cleanup vulnerability in ICQ 2000A
ICQwebmail client for ICQ 2000A creates a world readable temporary file during login and does not delete it, which allows local users to obtain sensitive information.
local
low complexity
icq CWE-459
5.5