Vulnerabilities > CVE-2013-2562 - Credentials Management vulnerability in Mambo-Foundation Mambo CMS 4.6.5

047910
CVSS 2.1 - LOW
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
local
low complexity
mambo-foundation
CWE-255

Summary

Mambo CMS 4.6.5 stores the MySQL database password in cleartext in the document root, which allows local users to obtain sensitive information via unspecified vectors.

Vulnerable Configurations

Part Description Count
Application
Mambo-Foundation
1

Common Weakness Enumeration (CWE)