Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The InputAccel Database (IADB) installation process in EMC Captiva Capture 7.0 before patch 25 and 7.1 before patch 13 places a cleartext InputAccel (IA) SQL password in a DAL log file, which allows local users to obtain sensitive information by reading a file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
EMC Captiva Capture InputAccel Database 信息泄露漏洞
Vulnerability Description
EMC Captiva Capture是美国易安信（EMC）公司的一套数据捕获软件。该软件能够捕获文件、电子文件和其他来源的文件和数据，并将其转化为数字内容交付与内容管理系统和业务流程。 EMC Captiva Capture patch 25之前7.0版本和patch 13之前7.1版本的InputAccel Database (IADB)安装过程中存在安全漏洞，该漏洞源于DAL日志文件中存储明文的InputAccel(IA) SQL密码。本地攻击者可通过读取该文件利用该漏洞获取敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A