PT-2004-2176
CVE-2004-1228
·
Publicado
2004-12-15
·
Atualizado
2017-07-11
Descrição por
CVSS 2.0
6.4
MédiaMétricasAV:N/AC:L/Au:N/C:P/I:N/A:P
Name of the Vulnerable Software and Affected Versions:
SugarCRM Sugar Sales versions 2.0.1c and earlier
Description:
The issue arises from the install scripts not being removed after installation, allowing attackers to obtain the MySQL administrative password in cleartext or cause a denial of service by altering database settings to their default values.
Recommendations:
For SugarCRM Sugar Sales versions 2.0.1c and earlier, remove the install scripts after installation to prevent potential attacks.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾