PT-2005-4091
CVE-2005-3280
·
Published
2005-10-23
·
Updated
2018-10-19
Description by
CVSS 2.0
7.5
HighMetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Paros version 3.2.5
Description
The issue allows remote attackers to gain privileges due to the use of a default password for the
sa account in the underlying HSQLDB database and lack of access restriction to the local machine.Recommendations
For Paros version 3.2.5, change the default password for the
sa account in the HSQLDB database and restrict access to the local machine to prevent unauthorized access. Found an issue in the description? Have something to add? Feel free to write us 👾