Security Advisory

CVE-2008-3924

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2008-09-04 18:00:00

Last updated 2024-08-07 10:00:42

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The "Make a backup" functionality in Content Management Made Easy (CMME) 1.12 stores sensitive information under the web root with insufficient access control, which allows remote attackers to discover (1) account names and (2) password hashes via a direct request for (a) backup/cmme_data.zip or (b) backup/cmme_cmme.zip. NOTE: it was later reported that vector a also affects CMME 1.19.

← Browse all CVEs View on cve.org ↗