CVE-2024-1346

CVSS V2 None CVSS V3 None

Description

Weak MySQL database root password in LaborOfficeFree affects version 19.10. This vulnerability allows an attacker to calculate the root password of the MySQL database used by LaborOfficeFree using two constants.

Overview

CVE ID
CVE-2024-1346

Assigner
INCIBE

Vulnerability Status
PUBLISHED

Published Version
2024-02-19T11:24:08.708Z

Last Modified Date
2024-02-19T11:24:08.708Z

Weakness Enumerations

CWE	URL
CWE-521	http://cwe.mitre.org/data/definitions/521.html

References

Reference URL	Reference Tags
https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-laborofficefree

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-1346
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1346

History

Created	Old Value	New Value	Data Type	Notes
2024-06-26 05:43:35				Added to TrackCVE