PT-2019-16797 · Fuji Electric · V-Server

Publicado 2019-06-12 · Atualizado 2020-08-24 · CVE-2019-3947

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Fuji Electric V-Server versions prior to 6.0.33.0

Description The issue allows an attacker to recover database credentials stored in project files as plaintext. If an attacker gains access to the project file, they can obtain the database credentials and access the database server.

Recommendations For versions prior to 6.0.33.0, update to version 6.0.33.0 or later to resolve the issue.

Exploit

Correção

Insufficiently Protected Credentials

Enumeração de Fraquezas

CWE-522

Identificadores relacionados

CVE-2019-3947

Produtos afetados

V-Server

Referências · 4

• 🔥 https://tenable.com/security/research/tra-2019-27 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-3947 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-3947 · Aviso do Fabricante
• http://securityfocus.com/bid/108740 · Nota