← Vulnerability feed

Vulnerability record · CVE-2005-0640 · published 2 March 2005

CVE-2005-0640: Broadcom unicenter asset management vulnerability

Broadcom · Unicenter Asset Management

Computer Associates (CA) Unicenter Asset Management (UAM) 4.0 does not properly initialize the "Change Credentials for Database" window, which allows local users to recover the SQL Admin password via certain methods.

4.6 CVSS 2.0 Medium EPSS 0.36% · top 72.7%
4.6CVSS 2.0 base score
0.36%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References
16 Jun 2026Last modified by NVD

Description

Computer Associates (CA) Unicenter Asset Management (UAM) 4.0 does not properly initialize the "Change Credentials for Database" window, which allows local users to recover the SQL Admin password via certain methods.

AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://secunia.com/advisories/14454 PatchVendor Advisory
http://supportconnect.ca.com/sc/solcenter/solresults.jsp?aparno=Qo64323 PatchVendor Advisory
http://secunia.com/advisories/14454 PatchVendor Advisory
http://supportconnect.ca.com/sc/solcenter/solresults.jsp?aparno=Qo64323 PatchVendor Advisory

Track CVE-2005-0640 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2005-2668CA Message Queuing buffer overflows allow remote code executionComputer Associates Message Queuing (CAM/CAFT) versions 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 contain multiple buffer overflows…EPSS 75%analysed10.0CVE-2005-2669Broadcom advantage data transport vulnerabilityComputer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 allows remote attackers to execute …EPSS 7.3%9.3CVE-2007-0060Broadcom advantage data transport vulnerabilityStack-based buffer overflow in the Message Queuing Server (Cam.exe) in CA (formerly Computer Associates) Message Queuing (CAM / CAFT) software before…EPSS 24%7.5CVE-2005-0642Broadcom unicenter asset management vulnerabilitySQL injection vulnerability in the Query Designer for Computer Associates (CA) Unicenter Asset Management (UAM) 4.0 allows remote attackers to execut…EPSS 1.4%5.0CVE-2005-2667Broadcom advantage data transport vulnerabilityUnknown vulnerability in Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 allows att…EPSS 3.1%4.3CVE-2005-0641Broadcom unicenter asset management vulnerabilityCross-site scripting (XSS) vulnerability in the Reporter for Computer Associates (CA) Unicenter Asset Management (UAM) 4.0 allows remote attackers to…EPSS 1.3%

Source: NIST National Vulnerability Database (record CVE-2005-0640), CISA KEV, FIRST EPSS (scores of 2026-10-12). This page is refreshed as NVD updates the record.