CVEvulnerability
CVE-2009-2899
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2012-12-05
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
The monitor perl script in the Sybase database plug-in in SpringSource Hyperic HQ before 4.3 allows local users to obtain the database password by listing the process and its arguments.
Affected configurations
• vmware hyperic hq (<= 4.2)
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://communities.vmware.com/thread/348773 communities.vmware.com
- http://support.springsource.com/security/CVE-2009-2899 Vendor Advisory
- https://jira.hyperic.com/browse/HHQ-1031 jira.hyperic.com
- http://communities.vmware.com/thread/348773 communities.vmware.com
- http://support.springsource.com/security/CVE-2009-2899 Vendor Advisory
- https://jira.hyperic.com/browse/HHQ-1031 jira.hyperic.com