Notified:  February 06, 2006 Updated: May 26, 2006

Status

Affected

Vendor Statement

Remediation in C5 EVM version 2.8.1 and above Command line options facilitating un-encrypted message text between the C5 EVM Sensor and C5 EVM Server have been removed from the C5 EVM Sensor. The C5 EVM Sensor will no longer send or accept un-encrypted messages.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.