PT-2014-3841

CVE-2014-0786

·

Publicado

2014-05-01

·

Atualizado

2025-10-13

Descrição por

CVSS 2.0
7.5
Alta
MétricasAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Ecava IntegraXor versions prior to 4.1.4393
Description The issue allows remote attackers to read cleartext credentials for administrative accounts via SELECT statements that leverage the guest role. This is related to an information disclosure vulnerability.
Recommendations For versions prior to 4.1.4393, update to version 4.1.4393 or later to resolve the issue. As a temporary workaround, consider restricting access to the guest role to minimize the risk of exploitation.
Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Identificadores relacionados
ZDI-14-117
ZDI-14-369
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾