CVE-2012-4947 Agile FleetCommander and FleetCommander Kiosk before 4.08 store database credentials in cleartext, which allows remote attackers to obtain sensitive information via requests to unspecified pages.
MediumCVSS 5.0
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Agile FleetCommander and FleetCommander Kiosk before 4.08 store database credentials in cleartext, which allows remote attackers to obtain sensitive information via requests to unspecified pages.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| agilefleet fleetcommander | <= 4.0 | No fix listed |
| agilefleet fleetcommander kiosk | <= 4.0 | No fix listed |
References
- VU#427547 third-party-advisory us-government-resource
- 56427 vdb-entry
- fleetcommander-information-disc(79858) vdb-entry