PT-2020-7227 · Unknown · Arial Campaign Enterprise

Catatonic · Published 2020-01-10 · Updated 2020-01-15 · CVE-2012-3823

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Arial Campaign Enterprise versions prior to 11.0.551

Description The issue concerns the storage of passwords in clear text, which can be retrieved.

Recommendations For versions prior to 11.0.551, update to version 11.0.551 or later to resolve the issue.

Exploit

Fix

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2012-3823

Affected Products

Arial Campaign Enterprise

References · 4

• 🔥 http://sadgeeksinsnow.blogspot.dk/2012/10/my-first-experiences-bug-hunting-part-2.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-3823 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/79510 · Note
• https://t.me/cibsecurity/9119 · Telegram Post