PT-2018-2788 · Galaktika · Galaktika Erp

Publicado 2018-08-31 · Atualizado 2018-08-31

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Galaktika ERP (affected versions not specified)

Description The issue is related to the storage of administrator user credentials in plain text, which can be used to configure the software. An attacker with local access can exploit this to reveal privileged user credentials by analyzing the contents of the HKLM registry branch (HKEY LOCAL MACHINESOFTWAREGalaktika Corp), which is accessible to all users.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-314

Identificadores relacionados

BDU:2019-01850

Produtos afetados

Galaktika Erp

Referências · 1

• https://bdu.fstec.ru/vul/2019-01850 · Nota de Segurança