high7.8
CVE-2024-32010
A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2).
Impact
A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to extraction of database credentials via a world-readable credential file. This allows an attacker to connect to the database as privileged application user and to run system commands via the database.
Affected products
| Product | Affected versions |
|---|---|
| Spectrum Power 4 (All | before 4.70 |
Versions were read from the advisory text. No structured product data has been published for this record yet.