Brute Force Attack on MySQL Database Root Password
CVE-2024-1345

5.5MEDIUM

Key Information:

Vendor

LaborOfficeFree

Status
LaborOfficeFree
Vendor
CVE Published:
19 February 2024

What is CVE-2024-1345?

Weak MySQL database root password in LaborOfficeFree affects version 19.10. This vulnerability allows an attacker to perform a brute force attack and easily discover the root password.

Affected Version(s)

LaborOfficeFree 19.10

References

https://www.incibe.es/en/incibe-cert/notices/aviso/multip...

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Pedro Gabaldón Juliá
Javier Medina Munuera
Antonio José Gálvez Sánchez
Alejandro Baño Andrés
.