Agile FleetCommander and FleetCommander Kiosk before 4.08 store database credentials in cleartext, which allows remote attackers to obtain sensitive information via requests to unspecified pages.
References
Link | Resource |
---|---|
http://www.kb.cert.org/vuls/id/427547 | US Government Resource |
http://www.securityfocus.com/bid/56427 | |
https://exchange.xforce.ibmcloud.com/vulnerabilities/79858 |
Configurations
Configuration 1 (hide)
|
Information
Published : 2012-11-18 13:55
Updated : 2017-08-28 18:32
NVD link : CVE-2012-4947
Mitre link : CVE-2012-4947
JSON object : View
CWE
CWE-310
Cryptographic Issues
Products Affected
agilefleet
- fleetcommander
- fleetcommander_kiosk