CVE-2007-2883

medium

Description

Credant Mobile Guardian Shield for Windows 5.2.1.105 and earlier stores account names and passwords in plaintext in memory, which allows local users to obtain sensitive information by (1) reading the paging file or (2) dumping and searching the memory image. NOTE: This issue crosses privilege boundaries because the product is intended to protect the data on a stolen computer.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/34487

http://www.securityfocus.com/bid/24139

http://www.securityfocus.com/archive/1/469486/100/0/threaded

http://www.kb.cert.org/vuls/id/821865

http://securityreason.com/securityalert/2753

http://secunia.com/advisories/25410

http://osvdb.org/36524

Details

Source: Mitre, NVD

Published: 2007-05-30

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 4.6

Vector: CVSS2#AV:L/AC:L/Au:N/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 5.5

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Severity: Medium

EPSS

EPSS: 0.00093