Arial Campaign Enterprise before 11.0.551 stores passwords in clear text and these may be retrieved.
References
Link | Resource |
---|---|
http://sadgeeksinsnow.blogspot.dk/2012/10/my-first-experiences-bug-hunting-part-2.html | Exploit Third Party Advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/79510 | VDB Entry |
Configurations
History
No history.
Information
Published : 2020-01-10 17:15
Updated : 2024-02-04 20:39
NVD link : CVE-2012-3823
Mitre link : CVE-2012-3823
CVE.ORG link : CVE-2012-3823
JSON object : View
Products Affected
arialsoftware
- campaign_enterprise
CWE
CWE-522
Insufficiently Protected Credentials