CVE-2010-0124 Employee Timeclock Software 0.99 places the database password on the mysqldump command line, which allows local users to obtain sensitive information by listing the process.
LowCVSS 2.1
EPSS 0.37%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Employee Timeclock Software 0.99 places the database password on the mysqldump command line, which allows local users to obtain sensitive information by listing the process.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| timeclock-software employee timeclock software | = 0.99 | No fix listed |
References
- 38739 third-party-advisory vendor-advisory
- secunia.com vendor-advisory
- 62830 vdb-entry
- 20100310 Secunia Research: Employee Timeclock Software "mysqldump" Password Disclosure mailing-list
- 38642 vdb-entry
- timeclock-mysqldump-info-disclosure(56800) vdb-entry