PT-2012-2181 · Akiva · Akiva Webboard

Alexander Fuchs · Publicado 2012-10-04 · Atualizado 2012-10-05 · CVE-2011-5204

Positive Technologies (AI Summary)

CVSS v2.0

1.9

Baixa

Vetor base

AV:L/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Akiva WebBoard versions 8.x

Description The issue allows local users to obtain sensitive information by reading from the database because passwords are stored in plaintext.

Recommendations For Akiva WebBoard versions 8.x, update the software to a version that securely stores passwords, such as hashed versions, to prevent unauthorized access to sensitive information.

Exploit

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2011-5204

Produtos afetados

Akiva Webboard

Referências · 6

• 🔥 http://exploit-db.com/exploits/18293 · Exploit
• 🔥 https://exploit-db.com/exploits/18293 · Exploit
• http://secunia.com/advisories/47318 · Aviso do Fabricante
• http://archives.neohapsis.com/archives/fulldisclosure/2011-12/0475.html · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-5204 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-5204 · Nota de Segurança