CVE-2006-6145

CVE-2006-6145 describes a vulnerability in CRYPTOCard CRYPTO-Server versions prior to 6.4.56, where LDAP credentials are stored in plaintext within the UninstallerData\installvariables.properties file. This file has insecure permissions, allowing local users to access these sensitive credentials. The vulnerability has a low severity CVSS score of 2.1, indicating a low attack complexity and requiring local access (AV:L/AC:L). The potential impact is limited to confidentiality (C:P), as an attacker could obtain credentials but not modify or deny service. There is no evidence of active exploitation, and no exploit code is publicly available via Metasploit, Nuclei, or ExploitDB. The CVE has received minimal community attention, with no social media discussion or media coverage.