Remote Password Discovery Vulnerability in EFS Software Easy Chat Server
CVE-2017-9557

7.5HIGH

Key Information:

Vendor

Echatserver

Status
Easy Chat Server
Vendor
CVE Published:
12 June 2017

What is CVE-2017-9557?

The EFS Software Easy Chat Server, versions 2.0 to 3.1, is susceptible to a vulnerability that allows remote attackers to exploit the system's username parameter alongside an empty password parameter. By doing so, they can access and extract sensitive information, specifically passwords, by examining the HTML source code of the server's response. This flaw can compromise user credentials, leading to unauthorized access and potential security breaches.

References

https://www.exploit-db.com/exploits/42153/
exploitx_refsource_EXPLOIT-DB

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.