PT-2021-9151

CVE-2020-10552

·

Published

2021-02-05

·

Updated

2021-07-21

Description by

CVSS 3.1
8.1
High
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions Psyprax versions prior to 3.2.2
Description An issue was discovered in Psyprax where the Firebird database is accessible with the default user sysdba and password masterke after installation. This allows any user to access it and read and modify the contents, including passwords. Local database files can be accessed directly as well.
Recommendations For versions prior to 3.2.2, update to version 3.2.2 or later to resolve the issue. As a temporary workaround, consider changing the default password for the sysdba user to prevent unauthorized access to the Firebird database. Restrict access to local database files to minimize the risk of exploitation.
Exploitability
Fix
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾