CVEvulnerability
CVE-2008-7207
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2009-09-11
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-310
Description
RivetTracker before 1.0 stores passwords in cleartext in config.php, which allows local users to discover passwords by reading config.php.
Affected configurations
• rivetcode rivettracker (<= 0.8)
• rivetcode rivettracker 0.1
Related
Weakness · not in database (1)
References
- http://osvdb.org/42433 osvdb.org
- http://www.rivetcode.com/files/rivettracker/rivettracker_1-0.zip www.rivetcode.com
- http://osvdb.org/42433 osvdb.org
- http://www.rivetcode.com/files/rivettracker/rivettracker_1-0.zip www.rivetcode.com