PT-2012-2181 · Akiva · Akiva Webboard

Alexander Fuchs · Published 2012-10-04 · Updated 2012-10-05 · CVE-2011-5204

Positive Technologies (AI Summary)

CVSS v2.0

1.9

Low

Base vector

AV:L/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Akiva WebBoard versions 8.x

Description The issue allows local users to obtain sensitive information by reading from the database because passwords are stored in plaintext.

Recommendations For Akiva WebBoard versions 8.x, update the software to a version that securely stores passwords, such as hashed versions, to prevent unauthorized access to sensitive information.

Exploit

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2011-5204

Affected Products

Akiva Webboard

References · 6

• 🔥 http://exploit-db.com/exploits/18293 · Exploit
• 🔥 https://exploit-db.com/exploits/18293 · Exploit
• http://secunia.com/advisories/47318 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-5204 · Security Note
• http://archives.neohapsis.com/archives/fulldisclosure/2011-12/0475.html · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-5204 · Note