PT-2007-4837 · Jedox+1 · Jedox Palo+1

Published 2007-07-05 · Updated 2008-11-15 · CVE-2007-3581

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Jedox Palo version 1.5

Description The issue allows remote attackers to obtain the password by sniffing the network. This can be demonstrated by starting Excel with the Palo plugin, opening a cube, and performing an Insert View, which transmits the password in cleartext.

Recommendations For Jedox Palo version 1.5, consider disabling the transmission of passwords in cleartext as a temporary workaround until a patch is available. Restrict access to sensitive networks to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2007-3581

Affected Products

Office Excel

Jedox Palo

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2007-3581 · Security Note
• http://osvdb.org/45754 · Note
• http://85.10.222.122/mantis/public_show_bug.php?bug_id=452 · Note