CVE-1999-1430 Missing authorization in n/a
Local attackers can bypass password protection to read sensitive data from Royal daVinci PIM files by accessing them directly with other applications.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-1999-1430?
CVE-1999-1430 is a low-severity missing authorization vulnerability in n/a, published on 12 Sep 2001. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
PIM software for Royal daVinci does not properly password-protext access to data stored in the .mdb (Microsoft Access) file, which allows local users to read the data without a password by directly accessing the files with a different application, such as Access.
Which versions are affected by CVE-1999-1430?
It affects 1 product.
Products include Royal Davinci.
How do I fix CVE-1999-1430?
No fix has been published for CVE-1999-1430 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-1999-1430 being exploited?
There is no known exploitation of CVE-1999-1430 in the wild and no public exploit code.
Sources
Also known as GHSA-527c-cp3w-hxwj.