CVE-2014-0786

Summary

Ecava IntegraXor before 4.1.4393 allows remote attackers to read cleartext credentials for administrative accounts via SELECT statements that leverage the guest role.

Affected Software

Weaknesses

• CWE-200: CWE-200

ADP Enrichment

CVE Program Container

Additional References

• http://www.integraxor.com/blog/category/security/vulnerability-note/
• http://ics-cert.us-cert.gov/advisories/ICSA-14-091-01

References

• http://www.integraxor.com/blog/category/security/vulnerability-note/
• https://www.cisa.gov/news-events/ics-advisories/icsa-14-091-01
• http://www.integraxor.com/blog/category/security/vulnerability-note/
• https://www.cisa.gov/news-events/ics-advisories/icsa-14-224-01

• ←Previous
• Next→