CVEvulnerability
CVE-2013-6223
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2014-06-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-255
Description
LiveZilla before 5.1.1.0 stores the admin Base64 encoded username and password in a 1click file, which allows local users to obtain access by reading the file.
Affected configurations
• livezilla livezilla (<= 5.1.0.0)
• livezilla livezilla 3.1.8.3
• livezilla livezilla 3.2.0.2
• livezilla livezilla 4.0.1.0
• livezilla livezilla 4.0.1.1
• livezilla livezilla 4.0.1.2
• livezilla livezilla 4.1.0.3
• livezilla livezilla 4.1.0.4
• livezilla livezilla 4.2.0.4
• livezilla livezilla 4.2.0.5
• livezilla livezilla 5.0.1.0
• livezilla livezilla 5.0.1.1
• livezilla livezilla 5.0.1.2
• livezilla livezilla 5.0.1.3
• livezilla livezilla 5.0.1.4
Related
Weakness · not in database (1)
References
- http://blog.curesec.com/article/blog/27.html Exploit
- http://forums.livezilla.net/index.php?/topic/163-livezilla-changelog/ Vendor Advisory
- http://osvdb.org/100400 osvdb.org
- http://seclists.org/fulldisclosure/2013/Nov/210 seclists.org
- http://blog.curesec.com/article/blog/27.html Exploit
- http://forums.livezilla.net/index.php?/topic/163-livezilla-changelog/ Vendor Advisory
- http://osvdb.org/100400 osvdb.org
- http://seclists.org/fulldisclosure/2013/Nov/210 seclists.org