Skip to content

CVE-2016-5683 ReadyDesk 9.1 allows local users to determine cleartext SQL Server credentials by reading the SQL_Config.aspx file and decrypting data with a hardcoded key in the ReadyDesk.dll file.

HighCVSS 7.8 EPSS 0.35%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

ReadyDesk 9.1 allows local users to determine cleartext SQL Server credentials by reading the SQL_Config.aspx file and decrypting data with a hardcoded key in the ReadyDesk.dll file.

Affected products

ProductAffected versionsFixed in
readydesk = 9.1 No fix listed

References

  • VU#294272 third-party-advisory us-government-resource
  • 92487 vdb-entry