CVE-2014-3419

2014-07-1514:55:09

CWE-255

[email protected]

web.nvd.nist.gov

infoblox netmri

6.8.5

default password

mysql

root

vulnerability

cve-2014-3419

nvd

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

8.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Infoblox NetMRI before 6.8.5 has a default password of admin for the “root” MySQL database account, which makes it easier for local users to obtain access via unspecified vectors.

Affected configurations

NVD

Node

infobloxnetmriRange≤6.8.4

infobloxnetmriMatch6.0.2.42

infobloxnetmriMatch6.1.2

infobloxnetmriMatch6.2.1

infobloxnetmriMatch6.2.1.48

infobloxnetmriMatch6.8.2.11

CPENameOperatorVersion
infoblox:netmriinfoblox netmrile6.8.4
infoblox:netmriinfoblox netmrieq6.0.2.42
infoblox:netmriinfoblox netmrieq6.1.2
infoblox:netmriinfoblox netmrieq6.2.1
infoblox:netmriinfoblox netmrieq6.2.1.48
infoblox:netmriinfoblox netmrieq6.8.2.11

CPE	Name	Operator	Version
infoblox:netmri	infoblox netmri	le	6.8.4
infoblox:netmri	infoblox netmri	eq	6.0.2.42
infoblox:netmri	infoblox netmri	eq	6.1.2
infoblox:netmri	infoblox netmri	eq	6.2.1
infoblox:netmri	infoblox netmri	eq	6.2.1.48
infoblox:netmri	infoblox netmri	eq	6.8.2.11