CVE-2019-7666

Name of the Vulnerable Software and Affected Versions Prima Systems FlexAir versions 2.3.38 and prior

Description The issue allows for improper authentication using the MD5 hash value of the password, potentially enabling an attacker with database access to login as admin without decrypting the password.

Recommendations For versions 2.3.38 and prior, consider updating to a version that uses a more secure authentication mechanism, such as one that does not rely on the MD5 hash value of the password. As a temporary workaround, restrict access to the database to minimize the risk of exploitation.