PT-2017-19074
CVE-2017-9615
·
تاريخ النشر
2017-06-26
·
تاريخ التحديث
2019-10-03
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Cognito Software Moneyworks versions 8.0.3 and earlier
Description
The issue allows attackers to gain administrator access to all data. This is because verbose logging writes the administrator password to a world-readable file.
Recommendations
For versions 8.0.3 and earlier, update to a version later than 8.0.3 to prevent password exposure.
As a temporary workaround, consider disabling verbose logging until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾