CVE-2015-0988

{"id": "CVE-2015-0988", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2015-10-06T01:59:04.970", "references": [{"url": "https://ics-cert.us-cert.gov/advisories/ICSA-15-274-01", "tags": ["Third Party Advisory", "US Government Resource"], "source": "ics-cert@hq.dhs.gov"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "Omron CX-One CX-Programmer before 9.6 uses a reversible format for password storage in project source-code files, which makes it easier for local users to obtain sensitive information by reading a file."}, {"lang": "es", "value": "Omron CX-One CX-Programmer en versiones anteriores a 9.6 utiliza un fomato reversible para el almacenamiento de contrase\u00f1a en archivos del c\u00f3digo fuente del proyecto, lo que hace m\u00e1s f\u00e1cil para usuarios locales obtener informaci\u00f3n sensible mediante la lectura de un archivo."}], "lastModified": "2015-10-06T23:49:11.530", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:omron:cx-programmer:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "403F92B5-1ABA-43FB-B365-9E57F3EA56EE", "versionEndIncluding": "9.5"}], "operator": "OR"}]}], "sourceIdentifier": "ics-cert@hq.dhs.gov"}