Information disclosure

2008-08-2720:41:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

55.9%

JSON

Crafty Syntax Live Help (CSLH) 2.14.6 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information.

CPENameOperatorVersion
crafty_syntax_live_helpeq2.11.4
crafty_syntax_live_helpeq2.14.5
crafty_syntax_live_helpeq2.9.2
crafty_syntax_live_helpeq2.0
crafty_syntax_live_helpeq2.12.5
crafty_syntax_live_helpeq2.14.4
crafty_syntax_live_helpeq2.9.8
crafty_syntax_live_helpeq2.11.2
crafty_syntax_live_helpeq2.7
crafty_syntax_live_helpeq2.11.7

Name	Operator	Version
crafty_syntax_live_help	eq	2.11.4
crafty_syntax_live_help	eq	2.14.5
crafty_syntax_live_help	eq	2.9.2
crafty_syntax_live_help	eq	2.0
crafty_syntax_live_help	eq	2.12.5
crafty_syntax_live_help	eq	2.14.4
crafty_syntax_live_help	eq	2.9.8
crafty_syntax_live_help	eq	2.11.2
crafty_syntax_live_help	eq	2.7
crafty_syntax_live_help	eq	2.11.7

Rows per page:

1-10 of 671

References

securityreason.com/securityalert/4192

www.gulftech.org/?node=research&article_id=00127-08252008

www.securityfocus.com/archive/1/495729/100/0/threaded

exchange.xforce.ibmcloud.com/vulnerabilities/44745