high7.5
CVE-2014-0786
Ecava IntegraXor before 4.1.4393 allows remote attackers to read cleartext credentials for administrative accounts via SELECT statements that leverage the gues…
Impact
Ecava IntegraXor before 4.1.4393 allows remote attackers to read cleartext credentials for administrative accounts via SELECT statements that leverage the guest role.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ecava | Integraxor | through 4.1.4390 Versions 4.1, 4.1.4340, 4.1.4360, 4.1.4369, 4.1.4380 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.integraxor.com/blog/category/security/vulnerability-note/
- http://www.integraxor.com/blog/category/security/vulnerability-note/
- http://www.integraxor.com/blog/category/security/vulnerability-note/
- http://www.integraxor.com/blog/category/security/vulnerability-note/
- https://www.cisa.gov/news-events/ics-advisories/icsa-14-091-01
- https://www.cisa.gov/news-events/ics-advisories/icsa-14-224-01
- http://ics-cert.us-cert.gov/advisories/ICSA-14-091-01
- http://www.integraxor.com/blog/category/security/vulnerability-note/