PT-2010-1590 · Tukeva · Tukeva Password Reminder

Iqlusion · Publicado 2010-04-21 · Atualizado 2024-02-14 · CVE-2009-4781

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions TUKEVA Password Reminder version 1.0.0.3 and earlier

Description The issue allows local users to discover credentials due to a hard-coded password for rem.accdb. This can be achieved via a DBI connection.

Recommendations For versions prior to 1.0.0.4, update to version 1.0.0.4 or later to resolve the issue.

Exploit

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2009-4781

Produtos afetados

Tukeva Password Reminder

Referências · 5

• 🔥 https://exploit-db.com/exploits/10201 · Exploit
• 🔥 http://exploit-db.com/exploits/10201 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-4781 · Nota de Segurança
• http://secunia.com/advisories/37553 · Aviso do Fabricante
• http://tekuva.com/index.php?option=com_docman&task=doc_details&gid=40&Itemid=9 · Nota