CVE-2014-8347

EPSS 1.4%

An Authentication Bypass vulnerability exists in the MatchPasswordData function in DBEngine.dll in Filemaker Pro 13.03 and Filemaker Pro Advanced 12.04, which could let a malicious user obtain elevated privileges.

Affected products

n/a · n/a

public PoCs found — 3

cve_referencepacketstormsecurity.com/files/128853/Filemaker-Login-Bypass-Privilege-Escalation.htmlunverified cve_referencewww.exploit-db.com/exploits/35077unverified exploitdbwww.exploit-db.com/exploits/35077unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://packetstormsecurity.com/files/128853/Filemaker-Login-Bypass-Privilege-Escalation.html https://exchange.xforce.ibmcloud.com/vulnerabilities/97780 https://lists.openwall.net/bugtraq/2014/10/27/4 https://www.securityfocus.com/archive/1/533814 http://www.exploit-db.com/exploits/35077