AdventNet EventLog Analyzer build 4030 for Windows, and possibly other versions and platforms, installs a mysql instance with a default "root" account without a password, which allows remote attackers to gain privileges and modify logs. Fixed in EventLog Analyzer Build 6000.
References
Configurations
Information
Published : 2007-11-21 15:46
Updated : 2020-03-26 08:15
NVD link : CVE-2007-6081
Mitre link : CVE-2007-6081
JSON object : View
CWE
CWE-264
Permissions, Privileges, and Access Controls
Products Affected
adventnet
- eventlog_analyzer