CVE-2006-4642

medium

Description

AuditWizard 6.3.2, when using "Remote Audit," logs the administrator password in plaintext to LaytonCmdSvc.log, which allows local users to obtain sensitive information by reading the file.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/28743

http://www.vupen.com/english/advisories/2006/3498

http://www.securityfocus.com/bid/19860

http://www.securityfocus.com/archive/1/445220/100/0/threaded

http://securityreason.com/securityalert/1525

http://secunia.com/advisories/21773

Details

Source: Mitre, NVD

Published: 2006-09-08

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 1.7

Vector: CVSS2#AV:L/AC:L/Au:S/C:P/I:N/A:N

Severity: Low

CVSS v3

Base Score: 5.5

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Severity: Medium

EPSS

EPSS: 0.00071

Detections

Analytics