CVE-2009-4781

TUKEVA Password Reminder before 1.0.0.4 uses a hard-coded password for rem.accdb, which allows local users to discover credentials via a DBI connection.

Score

CVSS 2.0 7.2 High

Status

Modified - cve@mitre.org

Published

2010-04-21

Last modified

2024-08-07

Weaknesses

CWE-255

Affected products

• Password Reminder (Tukeva)

References

• http://secunia.com/advisories/37553
• http://www.exploit-db.com/exploits/10201
• http://www.tekuva.com/index.php?option=com_docman&task=doc_details&gid=40&Itemid=9