PT-2004-2176
CVE-2004-1228
·
تاريخ النشر
2004-12-15
·
تاريخ التحديث
2017-07-11
الوصف من
CVSS 2.0
6.4
متوسطةالمقاييسAV:N/AC:L/Au:N/C:P/I:N/A:P
Name of the Vulnerable Software and Affected Versions:
SugarCRM Sugar Sales versions 2.0.1c and earlier
Description:
The issue arises from the install scripts not being removed after installation, allowing attackers to obtain the MySQL administrative password in cleartext or cause a denial of service by altering database settings to their default values.
Recommendations:
For SugarCRM Sugar Sales versions 2.0.1c and earlier, remove the install scripts after installation to prevent potential attacks.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾