Vulnerability Details : CVE-2002-2070
SecureClean 3 build 2.0 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted.
Exploit prediction scoring system (EPSS) score for CVE-2002-2070
Probability of exploitation activity in the next 30 days: 0.65%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 79 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2002-2070
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:P/I:N/A:N |
10.0
|
2.9
|
NIST |
7.5
|
HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
3.9
|
3.6
|
NIST |
CWE ids for CVE-2002-2070
-
The product does not properly "clean up" and remove temporary or supporting resources after they have been used.Assigned by: nvd@nist.gov (Primary)
References for CVE-2002-2070
-
http://www.iss.net/security_center/static/7953.php
Broken Link
-
http://www.securityfocus.com/bid/3912
Broken Link;Third Party Advisory;VDB Entry
-
http://www.seifried.org/security/advisories/kssa-003.html
Kurt SeifriedBroken Link;Vendor Advisory
-
http://www.ciac.org/ciac/bulletins/m-034.shtml
Broken Link;Vendor Advisory
-
http://www.securityfocus.com/archive/1/251565
Broken Link;Third Party Advisory;VDB Entry
Products affected by CVE-2002-2070
- cpe:2.3:a:accessdata:secureclean:3:build_2.0:*:*:*:*:*:*