CVE-2008-7207 RivetTracker before 1.0 stores passwords in cleartext in config.php, which allows local users to discover passwords by reading config.php.
LowCVSS 2.1
EPSS 0.29%
- Published
- Updated
- Exploit status
- No public exploit known
Description
RivetTracker before 1.0 stores passwords in cleartext in config.php, which allows local users to discover passwords by reading config.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rivetcode rivettracker | <= 0.8 | No fix listed |
| rivetcode rivettracker | = 0.1 | No fix listed |
References
- 42433 vdb-entry
- www.rivetcode.com