PT-2017-19074
CVE-2017-9615
·
Published
2017-06-26
·
Updated
2019-10-03
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Cognito Software Moneyworks versions 8.0.3 and earlier
Description
The issue allows attackers to gain administrator access to all data. This is because verbose logging writes the administrator password to a world-readable file.
Recommendations
For versions 8.0.3 and earlier, update to a version later than 8.0.3 to prevent password exposure.
As a temporary workaround, consider disabling verbose logging until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾