Vulnerabilities > CVE-2002-1022 - Unspecified vulnerability in Working Resources Inc. Badblue 1.7.3Enterprise/1.7.3Personal

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
working-resources-inc

Summary

BadBlue server stores passwords in plaintext in the ext.ini file, which could allow local and possibly remote attackers to gain privileges.