CVEvulnerability
CVE-2017-6911
6.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2017-03-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 6.6 MEDIUM — CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-922
Description
USB Pratirodh is prone to sensitive information disclosure. It stores sensitive information such as username and password in simple usb.xml. An attacker with physical access to the system can modify the file according his own requirements that may aid in further attack.
Affected configurations
• usb pratirodh project usb pratirodh
Related
Weakness · CWE (1)
- CWE-922 Insecure Storage of Sensitive Information weakness
References
- http://packetstormsecurity.com/files/141651/USB-Pratirodh-Insecure-Password-Storage.html Third Party Advisory, VDB Entry
- http://seclists.org/fulldisclosure/2017/Mar/43 Third Party Advisory, VDB Entry
- http://www.securityfocus.com/archive/1/540289/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/96970 Third Party Advisory, VDB Entry
- http://packetstormsecurity.com/files/141651/USB-Pratirodh-Insecure-Password-Storage.html Third Party Advisory, VDB Entry
- http://seclists.org/fulldisclosure/2017/Mar/43 Third Party Advisory, VDB Entry
- http://www.securityfocus.com/archive/1/540289/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/96970 Third Party Advisory, VDB Entry