CVE-2010-0124
Employee Timeclock Software 0.99 places the database password on the mysqldump command line,...
Employee Timeclock Software 0.99 places the database password on the mysqldump command line, which allows local users to obtain sensitive information by listing the process.
Exploit likelihood
What each source reports
NVD Score used
Employee Timeclock Software 0.99 places the database password on the mysqldump command line, which allows local users to obtain sensitive information by listing the process.
- Record
CVE-2010-0124- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-255
- Updated
- 2026-11-02
CVE ListNo score
Employee Timeclock Software 0.99 places the database password on the mysqldump command line, which allows local users to obtain sensitive information by listing the process.
- Record
CVE-2010-0124- Updated
- 2026-11-02
EUVDEUVD-2010-0156No score
Employee Timeclock Software 0.99 places the database password on the mysqldump command line, which allows local users to obtain sensitive information by listing the process.
- Record
EUVD-2010-0156- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-42m2-ww59-87vvNo score
Employee Timeclock Software 0.99 places the database password on the mysqldump command line,...
Employee Timeclock Software 0.99 places the database password on the mysqldump command line, which allows local users to obtain sensitive information by listing the process.
- Record
GHSA-42m2-ww59-87vv- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-0124 is a low vulnerability (CVSS 2.1) in Timeclock-software Employee Timeclock Software, published March 12, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.37%, the 30th percentile. No source names a fixed version.