Description (CNA)
Ecava IntegraXor before 4.1.4393 allows remote attackers to read cleartext credentials for administrative accounts via SELECT statements that leverage the guest role.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Ecava / IntegraXor | affected 0 before 4.1.4410 |
CWE
CWE-200
References
- http://www.integraxor.com/blog/category/security/vulnerability-note/
- https://www.cisa.gov/news-events/ics-advisories/icsa-14-091-01
- http://www.integraxor.com/blog/category/security/vulnerability-note/
- https://www.cisa.gov/news-events/ics-advisories/icsa-14-224-01
ADP enrichment
No English description supplied.