CVE-2011-3198 - CVE House
Back to Database
Status published Low CVE-2011-3198

Domain Technologie Control (DTC) before 0.34.1 includes a password in...

Vulnerability Description

Domain Technologie Control (DTC) before 0.34.1 includes a password in the -b command line argument to htpasswd, which might allow local users to read the password by listing the process and its arguments.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2011-3198

Credits & Attribution

No credits recorded in the NVD database.

References

More from gplhost

View All →
CVE-2011-5276
SQL injection vulnerability in the drawAdminTools_PackageInstaller function in shared/inc/forms/packager.php in...
Medium 6.5
CVE-2011-5275
The install script in Domain Technologie Control (DTC) before 0.34.1...
High 7.5
CVE-2011-5274
The drawAdminTools_PackageInstaller function in shared/inc/forms/packager.php in Domain Technologie Control (DTC)...
High 7.5
CVE-2011-5273
Directory traversal vulnerability in shared/package-installer in Domain Technologie Control (DTC)...
Medium 6.5
CVE-2011-5272
SQL injection vulnerability in Domain Technologie Control (DTC) before 0.34.1...
Medium 6.5

Affected Vendor

Affected Software

domain technologie control
Vulnerable Versions:
0, 0.24.6, 0.25.1, 0.25.2, 0.25.3, 0.26.7, 0.26.8, 0.26.9, 0.27.3, 0.28.2, 0.28.3, 0.28.4, 0.28.6, 0.28.9, 0.28.10, 0.29.1, 0.29.6, 0.29.8, 0.29.10, 0.29.14, 0.29.15, 0.29.16, 0.29.17, 0.30.6, 0.30.8, 0.30.10, 0.30.18, 0.30.20, 0.32.1, 0.32.2, 0.32.3, 0.32.4, 0.32.5, 0.32.6, 0.32.7

Timeline

Official Publish: March 20th, 2014
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.