Description
Aenovo products (1) aeNovo, (2) aeNovoShop, and (3) aeNovoWYSI store password information in plaintext in the (a) control, (b) content, and (c) page tables, which allows attackers with database access to obtain those passwords and gain privileges.
Metrics
CVSS 2.0 4.6/10
AV:L/AC:L/Au:N/C:P/I:P/A:PAffected software
No affected versions have been published.
Timeline
- Published
- Oct 14, 2005
- Last modified
- Jun 16, 2026
- NVD status
- Modified