Weak Password Hashing in WellinTech KingView Product
CVE-2012-4899

Currently unrated

Key Information:

Vendor
Wellintech
Status
Kingview
Vendor
CVE Published:
10 October 2012

Summary

WellinTech KingView 6.5.3 and earlier versions are vulnerable due to the use of a weak password-hashing algorithm, which allows local users to potentially discover sensitive credentials by accessing an unspecified file. This vulnerability poses a significant security risk as unauthorized access to credentials can lead to various exploit scenarios. It is imperative for users of the affected products to take appropriate measures to secure their systems and apply necessary patches.

References

http://www.wellintech.com/index.php/news/33-patch-for-kin...
x_refsource_MISC
http://www.us-cert.gov/control_systems/pdf/ICSA-12-283-02...
x_refsource_MISC

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.