CVE-2012-5696 Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 does not properly restrict access to frameworkgui/config, which allows remote attackers to obtain the plaintext database password via a di...
MediumCVSS 5.0
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 does not properly restrict access to frameworkgui/config, which allows remote attackers to obtain the plaintext database password via a direct request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bulbsecurity smartphone pentest framework | <= 0.1.2 | No fix listed |
References
- twitter.com
- www.htbridge.com exploit