PT-2018-2788

Publicado

2018-08-31

·

Atualizado

2018-08-31

Descrição por

CVSS 2.0
4.6
Média
MétricasAV:L/AC:L/Au:S/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions Galaktika ERP (affected versions not specified)
Description The issue is related to the storage of administrator user credentials in plain text, which can be used to configure the software. An attacker with local access can exploit this to reveal privileged user credentials by analyzing the contents of the HKLM registry branch (HKEY LOCAL MACHINESOFTWAREGalaktika Corp), which is accessible to all users.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Fornecedores
Produtos afetados
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾