PT-2015-5388 · Unknown · Topline Opportunity Form

Joel Land · Published 2015-02-16 · Updated 2016-12-31 · CVE-2015-1608

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Topline Opportunity Form (aka XLS Opp form) versions prior to 2015-02-15

Description The issue allows attackers to read sensitive credential and e-mail address information in cleartext via unspecified vectors due to improper restriction of access to database-connection strings.

Recommendations For versions prior to 2015-02-15, update to a version released after 2015-02-15 to properly restrict access to database-connection strings and protect sensitive information.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2015-1608

Affected Products

Topline Opportunity Form

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2015-1608 · Security Note
• http://kb.cert.org/vuls/id/BLUU-9RUTH4 · Note
• http://kb.cert.org/vuls/id/669156 · Note
• http://securityfocus.com/bid/72518 · Note