Paros 3.2.5 uses a default password for the sa account in the underlying HSQLDB database and does not restrict access to the local machine, which allows remote attackers to gain privileges.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Paros | Paros | 3.2.5 (including) | 3.2.5 (including) |