Pearson ProctorCache before 2015.1.17 uses the same hardcoded password across different customers' installations, which allows remote attackers to modify test metadata or cause a denial of service (test disruption) by leveraging knowledge of this password.
References
Link | Resource |
---|---|
http://www.kb.cert.org/vuls/id/626420 | Third Party Advisory US Government Resource |
Configurations
Information
Published : 2015-06-23 09:59
Updated : 2015-06-24 10:50
NVD link : CVE-2015-0972
Mitre link : CVE-2015-0972
JSON object : View
CWE
CWE-255
Credentials Management Errors
Products Affected
pearson
- proctorcache