CVE-2019-3947
Published Jun 12, 2019
Last updated 4 years ago
Overview
- Description
- Fuji Electric V-Server before 6.0.33.0 stores database credentials in project files as plaintext. An attacker that can gain access to the project file can recover the database credentials and gain access to the database server.
- Source
- vulnreport@tenable.com
- NVD status
- Modified
Risk scores
CVSS 3.0
- Type
- Primary
- Base score
- 9.8
- Impact score
- 5.9
- Exploitability score
- 3.9
- Vector string
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity
- CRITICAL
CVSS 2.0
- Type
- Primary
- Base score
- 5
- Impact score
- 2.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
- nvd@nist.gov
- CWE-522
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:fujielectric:v-server:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F47D918A-C673-47E3-8C59-64F116247C25",
"versionEndExcluding": "6.0.33.0"
}
],
"operator": "OR"
}
]
}
]