CVE-2014-0786 Ecava IntegraXor Information Exposure
MediumCVSS 5.0
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Ecava IntegraXor before 4.1.4393 allows remote attackers to read cleartext credentials for administrative accounts via SELECT statements that leverage the guest role.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ecava integraxor | <= 4.1.4390 | No fix listed |
| ecava integraxor | = 4.1 | No fix listed |
| ecava integraxor | = 4.1.4340 | No fix listed |
| ecava integraxor | = 4.1.4360 | No fix listed |
| ecava integraxor | = 4.1.4369 | No fix listed |
| ecava integraxor | = 4.1.4380 | No fix listed |
| ecava integraxor | < 4.1.4410 | 4.1.4410 |
References
- www.integraxor.com vendor-advisory
- www.cisa.gov
- www.cisa.gov
- ics-cert.us-cert.gov patch us-government-resource