CVE-2017-6911

MediumCVSS 6.6/10Last modified Jun 17, 2026

Description

USB Pratirodh is prone to sensitive information disclosure. It stores sensitive information such as username and password in simple usb.xml. An attacker with physical access to the system can modify the file according his own requirements that may aid in further attack.

Metrics

CVSS 3.0 6.6/10CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-922

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://packetstormsecurity.com/files/141651/USB-Pratirodh-Insecure-Password-Storage.htmlThird Party Advisory, VDB Entry
http://seclists.org/fulldisclosure/2017/Mar/43Third Party Advisory, VDB Entry
http://www.securityfocus.com/archive/1/540289/100/0/threaded
http://www.securityfocus.com/bid/96970Third Party Advisory, VDB Entry
http://packetstormsecurity.com/files/141651/USB-Pratirodh-Insecure-Password-Storage.htmlThird Party Advisory, VDB Entry
http://seclists.org/fulldisclosure/2017/Mar/43Third Party Advisory, VDB Entry
http://www.securityfocus.com/archive/1/540289/100/0/threaded
http://www.securityfocus.com/bid/96970Third Party Advisory, VDB Entry

Timeline

Published: Mar 23, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-69128.8Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Incorrect Access Control.CVE-2017-69136.1Cross-site scripting (XSS) vulnerability in the Open-Xchange webmail before 7.6.3-rev28 allows remote attackers to inject arbitrary web scri CVE-2017-69147.1CSRF exists in BigTree CMS 4.1.18 and 4.2.16 with the id parameter to the admin/ajax/users/delete/ page. A user can be deleted.CVE-2017-69154.3CSRF exists in BigTree CMS 4.1.18 with the colophon parameter to the admin/settings/update/ page. The Colophon can be changed.CVE-2017-69164.3CSRF exists in BigTree CMS 4.1.18 with the nav-social[#] parameter to the admin/settings/update/ page. The Navigation Social can be changed.CVE-2017-69174.3CSRF exists in BigTree CMS 4.2.16 with the value parameter to the admin/settings/update/ page. The Colophon can be changed.CVE-2017-69184.3CSRF exists in BigTree CMS 4.2.16 with the value[#][*] parameter to the admin/settings/update/ page. The Navigation Social can be changed.CVE-2017-69197.5Drupal 8 before 8.2.8 and 8.3 before 8.3.1 allows critical access bypass by authenticated users if the RESTful Web Services (rest) module is CVE-2017-69209.8Drupal core 8 before versions 8.3.4 allows remote attackers to execute arbitrary code due to the PECL YAML parser not handling PHP objects s CVE-2017-69215.9In Drupal 8 prior to 8.3.4; The file REST resource does not properly validate some fields when manipulating files. A site is only affected b CVE-2017-69226.5In Drupal core 8.x prior to 8.3.4 and Drupal core 7.x prior to 7.56; Private files that have been uploaded by an anonymous user but not perm CVE-2017-69236.5In Drupal 8.x prior to 8.3.7 When creating a view, you can optionally use Ajax to update the displayed data via filter parameters. The views