Every CVE Search/ Get API key

CVE-2010-0124

Employee Timeclock Software 0.99 places the database password on the mysqldump command line,...

2.1 Low

CVE-2010-0124 is a low vulnerability (CVSS 2.1) in Timeclock-software Employee Timeclock Software, published March 12, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.37%, the 30th percentile. No source names a fixed version.

Employee Timeclock Software 0.99 places the database password on the mysqldump command line, which allows local users to obtain sensitive information by listing the process.

Exploit likelihood

0.37%Down 0.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 2.1

Employee Timeclock Software 0.99 places the database password on the mysqldump command line, which allows local users to obtain sensitive information by listing the process.

Record
CVE-2010-0124
CVSS 2.0
2.1 LowAV:L/AC:L/Au:N/C:P/I:N/A:N
Weakness
CWE-255
Updated
2026-11-02
CVE List No score

Employee Timeclock Software 0.99 places the database password on the mysqldump command line, which allows local users to obtain sensitive information by listing the process.

Record
CVE-2010-0124
Updated
2026-11-02
EUVDEUVD-2010-0156 No score

Employee Timeclock Software 0.99 places the database password on the mysqldump command line, which allows local users to obtain sensitive information by listing the process.

Record
EUVD-2010-0156
Updated
2026-11-03
GitHub AdvisoriesGHSA-42m2-ww59-87vv No score

Employee Timeclock Software 0.99 places the database password on the mysqldump command line,...

Employee Timeclock Software 0.99 places the database password on the mysqldump command line, which allows local users to obtain sensitive information by listing the process.

Record
GHSA-42m2-ww59-87vv
Updated
2026-11-02

Affected products

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD

References

MoveEnter Open