CVE-2006-2719 Information disclosure in n/a
Attackers can obtain cleartext credentials from the database or network traffic, leading to unauthorized access to JIWA Financials accounts.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2006-2719?
CVE-2006-2719 is a medium-severity vulnerability in n/a, published on 1 Jun 2006. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
JIWA Financials 6.4.14 stores usernames and passwords for all accounts in cleartext in the HR_Staff table in Microsoft SQL Server, and sends the usernames and passwords in cleartext to the application's SQL Server ODBC driver, which might allow context-dependent attackers to obtain the passwords.
Which versions are affected by CVE-2006-2719?
It affects 1 product.
Products include Jiwa Financials.
How do I fix CVE-2006-2719?
No fix has been published for CVE-2006-2719 yet. Limit exposure of the affected software until one is available.
Is CVE-2006-2719 being exploited?
There is no known exploitation of CVE-2006-2719 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-cfwr-xp7c-5pq8.