Description (CNA)
Aenovo products (1) aeNovo, (2) aeNovoShop, and (3) aeNovoWYSI store password information in plaintext in the (a) control, (b) content, and (c) page tables, which allows attackers with database access to obtain those passwords and gain privileges.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://secunia.com/advisories/17117/
- http://marc.info/?l=bugtraq&m=112872593432359&w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22549
- http://www.kapda.ir/advisory-78.html
- http://www.osvdb.org/19939
ADP enrichment
No English description supplied.