CVE Vulnerabilities

CVE-2005-3280

Published: Oct 23, 2005 | Modified: Oct 19, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Paros 3.2.5 uses a default password for the sa account in the underlying HSQLDB database and does not restrict access to the local machine, which allows remote attackers to gain privileges.

Affected Software

Name Vendor Start Version End Version
Paros Paros 3.2.5 3.2.5

References