PT-2014-3841 · Ecava · Integraxor

·

CVE-2014-0786

·

تاريخ النشر

2014-05-01

·

تاريخ التحديث

2025-10-13

CVSS v2.0

7.5

عالية

المتجهAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Ecava IntegraXor versions prior to 4.1.4393
Description The issue allows remote attackers to read cleartext credentials for administrative accounts via SELECT statements that leverage the guest role. This is related to an information disclosure vulnerability.
Recommendations For versions prior to 4.1.4393, update to version 4.1.4393 or later to resolve the issue. As a temporary workaround, consider restricting access to the guest role to minimize the risk of exploitation.

إصلاح

Information Disclosure

وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾

تصنيف نقاط الضعف

المعرّفات ذات الصلة

CVE-2014-0786
ZDI-14-117
ZDI-14-369

المنتجات المتأثرة

Integraxor