CVE-2024-1344
Encrypted database credentials in LaborOfficeFree
Vexday Risk Score
13Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 6.8EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
19 feb 2024Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
Encrypted database credentials in LaborOfficeFree affecting version 19.10. This vulnerability allows an attacker to read and extract the username and password from the database of 'LOF_service.exe' and 'LaborOfficeFree.exe' located in the '%programfiles(x86)%\LaborOfficeFree\' directory. This user can log in remotely and has root-like privileges.
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Productos afectados
LaborOfficeFree · LaborOfficeFree¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →