CVE-2007-6330
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 5.1%
Meridian Prolog Manager 2007, and 7.5 and earlier, sends all usernames and passwords to the client in a (1) cleartext or (2) weakly encrypted format to support client-side login authentication, which makes it easier for remote attackers to obtain database access by capturing credentials via a man-in-the-middle attack.
Produtos afetados
n/a · n/aReferências
http://osvdb.org/42634http://secunia.com/advisories/28065https://exchange.xforce.ibmcloud.com/vulnerabilities/38996http://www.kb.cert.org/vuls/id/120593http://www.kb.cert.org/vuls/id/MIMG-77FL3Thttp://www.securityfocus.com/archive/1/484886/100/0/threadedhttp://www.securityfocus.com/bid/26826