PT-2006-4693 · Ej3 · Ej3 Topo

Attila Gerendi + 1 · Publicado 2006-07-25 · Atualizado 2018-10-17 · CVE-2006-3834

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions EJ3 TOPo version 2.2.178

Description The issue allows context-dependent attackers to obtain entry passwords via log files, referrers, or other vectors because the password is included in cleartext in the ID field to "index.php".

Recommendations For version 2.2.178, consider restricting access to the "index.php" endpoint until a fix is available to prevent the exposure of passwords in cleartext.

Correção

Identificadores relacionados

CVE-2006-3834

Produtos afetados

Ej3 Topo

Referências · 3

• http://securityfocus.com/archive/1/439890/100/100/threaded · Nota
• http://securityreason.com/securityalert/1279 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-3834 · Nota de Segurança