PT-2007-4837 · Jedox+1 · Jedox Palo+1

Publicado 2007-07-05 · Atualizado 2008-11-15 · CVE-2007-3581

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Jedox Palo version 1.5

Description The issue allows remote attackers to obtain the password by sniffing the network. This can be demonstrated by starting Excel with the Palo plugin, opening a cube, and performing an Insert View, which transmits the password in cleartext.

Recommendations For Jedox Palo version 1.5, consider disabling the transmission of passwords in cleartext as a temporary workaround until a patch is available. Restrict access to sensitive networks to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2007-3581

Produtos afetados

Office Excel

Jedox Palo

Referências · 3

• http://osvdb.org/45754 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-3581 · Nota de Segurança
• http://85.10.222.122/mantis/public_show_bug.php?bug_id=452 · Nota