CVE-2014-0786CWE-200
Ecava IntegraXor Information Exposure
High · published May 1, 2014
What it is
Ecava IntegraXor before 4.1.4393 allows remote attackers to read cleartext credentials for administrative accounts via SELECT statements that leverage the guest role.
The record
Technical detail
- CVSS v2.0
- 7.5 · HIGH
- Vector
- AV:N/AC:L/Au:N/C:P/I:P/A:P
- CVSS v4.0
- Not supplied
- EPSS
- 0.02650 · 85.5th percentile
- Weakness
- CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
- Published
- 2014-05-01T01:00Z
EPSS history
Timeline