CVE-2019-3947

Fuji Electric V-Server before 6.0.33.0 stores database credentials in project files as plaintext

published June 12, 2019

CVSS
—
EPSS
2%
Percentile
75.4
In the wild
Unconfirmed
What it is

⚠️ Plaintext passwords, just sitting there! Fuji Electric V-Server prior to version 6.0.33.0 is like a diary with the key under the doormat—anyone who finds it can read your secrets! 🔓 Think of this vulnerability like leaving your front door wide open with a sign that says 'Welcome, help yourself!' When attackers get access to the project files, they can grab your database credentials as easily as snatching a cookie from a plate. This could lead to a catastrophic data breach! An attacker gaining access to your database server could read, modify, or even delete sensitive information, putting your entire system at risk.

Put simply

Think of this vulnerability like leaving your front door wide open with a sign that says 'Welcome, help yourself!' When attackers get access to the project files, they can grab your database credentials as easily as snatching a cookie from a plate. The vulnerability lies in the fact that Fuji Electric V-Server stores database credentials in project files as plaintext. If an attacker can access these files, they can easily recover the database credentials and gain unauthorized access to the database.

What to do

This could lead to a catastrophic data breach! An attacker gaining access to your database server could read, modify, or even delete sensitive information, putting your entire system at risk. To secure your system, upgrade to version 6.0.33.0 immediately! Additionally, ensure proper access controls are in place to protect project files from unauthorized access and consider encrypting sensitive information stored in files. You’ve got this! By taking these steps, you’ll be one step closer to securing your system and ensuring the safety of your data. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01584 · 75.4th percentile
Published
2019-06-12T14:06Z
EPSS history
Timeline
  • 12 JUN 14:06Z
    Fuji Electric V-Server before 6.0.33.0 stores database credentials in project files as plaintext
    cvelistv5