Summary
The host is installed with LiveZilla and is prone to password disclosure vulnerability.
Impact
Successful exploitation will allow remote attackers to obtain sensitive information from the application, such as logged-in user credentials, which may aid in further attacks.
Impact Level: Application
Solution
Upgrade to LiveZilla 5.1.2.1 or later,
For updates refer to http://livezilla.net
Insight
LiveZilla contains a flaw that is due to the application storing credential information in plaintext. This will allow an attacker to gain access to username and password information.
Affected
LiveZilla version 5.1.2.0
Detection
Send a crafted data via HTTP GET request and check whether it is able read the password or not.
References
Severity
Classification
-
CVE CVE-2013-7033 -
CVSS Base Score: 4.3
AV:N/AC:M/Au:N/C:P/I:N/A:N
Related Vulnerabilities