PT-2015-5388 · Unknown · Topline Opportunity Form

Joel Land · Publicado 2015-02-16 · Atualizado 2016-12-31 · CVE-2015-1608

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Topline Opportunity Form (aka XLS Opp form) versions prior to 2015-02-15

Description The issue allows attackers to read sensitive credential and e-mail address information in cleartext via unspecified vectors due to improper restriction of access to database-connection strings.

Recommendations For versions prior to 2015-02-15, update to a version released after 2015-02-15 to properly restrict access to database-connection strings and protect sensitive information.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2015-1608

Produtos afetados

Topline Opportunity Form

Referências · 4

• http://kb.cert.org/vuls/id/BLUU-9RUTH4 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-1608 · Nota de Segurança
• http://kb.cert.org/vuls/id/669156 · Nota
• http://securityfocus.com/bid/72518 · Nota