CVE-2014-8347 An Authentication Bypass vulnerability exists in the MatchPasswordData function in DBEngine.dll in Filemaker Pro 13.03 and Filemaker Pro Advanced 12.04, which could let a malicious user obtain elevate...
HighCVSS 7.8
EPSS 1.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
An Authentication Bypass vulnerability exists in the MatchPasswordData function in DBEngine.dll in Filemaker Pro 13.03 and Filemaker Pro Advanced 12.04, which could let a malicious user obtain elevated privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Claris FileMaker Pro | = 13.03 | No fix listed |
| Claris filemaker pro advanced | = 12.0.4.0 | No fix listed |
References
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- www.exploit-db.com exploit third-party-advisory vdb-entry
- exchange.xforce.ibmcloud.com third-party-advisory vdb-entry
- lists.openwall.net exploit third-party-advisory
- www.securityfocus.com exploit third-party-advisory vdb-entry