CVE-2024-1346mediumCWE-521

CVE-2024-1346: medium-severity vulnerability in LaborOfficeFree

Weak MySQL database root password in LaborOfficeFree

Published · Updated

Follow this CVE+ Monitor LaborOfficeFree

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.8epss 0.4%
Weak MySQL database root password in LaborOfficeFree affects version 19.10. This vulnerability allows an attacker to calculate the root password of the MySQL database used by LaborOfficeFree using two constants.
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Affected products
LaborOfficeFree · LaborOfficeFree
Related CVEs — LaborOfficeFree

In the same product, most dangerous first.

CVE-2024-1344MEDIUMEncrypted database credentials in LaborOfficeFreeEPSS 0.3%CVE-2024-1345MEDIUMWeak MySQL database root password in LaborOfficeFreeEPSS 0.2%CVE-2024-1343MEDIUMWeak permission vulnerability in LaborOfficeFreeEPSS 0.1%