Description
Aenovo products (1) aeNovo, (2) aeNovoShop, and (3) aeNovoWYSI store password information in plaintext in the (a) control, (b) content, and (c) page tables, which allows attackers with database access to obtain those passwords and gain privileges.
Metrics
CVSS 2.0 4.6/10
AV:L/AC:L/Au:N/C:P/I:P/A:PAffected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://marc.info/?l=bugtraq&m=112872593432359&w=2
- http://secunia.com/advisories/17117/Vendor Advisory
- http://www.kapda.ir/advisory-78.htmlExploit, Vendor Advisory
- http://www.osvdb.org/19939
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22549
- http://marc.info/?l=bugtraq&m=112872593432359&w=2
- http://secunia.com/advisories/17117/Vendor Advisory
- http://www.kapda.ir/advisory-78.htmlExploit, Vendor Advisory
- http://www.osvdb.org/19939
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22549
Timeline
- Published
- Oct 14, 2005
- Last modified
- Jun 16, 2026
- NVD status
- Modified