CVE-2012-1923: Low severity realnetworks helix server vulnerability
RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x store passwords in cleartext under admbdb\users\, which allows local users to obtain sensitive information by reading a database.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-1923?
CVE-2012-1923 is considered a high severity vulnerability due to the exposure of passwords in cleartext.
How do I fix CVE-2012-1923?
To fix CVE-2012-1923, update the RealNetworks Helix Server or Helix Mobile Server to version 14.3 or later.
What systems are affected by CVE-2012-1923?
CVE-2012-1923 affects RealNetworks Helix Server versions 14.0.0 to 14.2.0.212 and Helix Mobile Server versions 14.0.0 to 14.0.1.
What risks are associated with CVE-2012-1923?
The risk associated with CVE-2012-1923 includes unauthorized access to sensitive user passwords stored in cleartext.
Is CVE-2012-1923 exploitable remotely?
CVE-2012-1923 is primarily a local vulnerability, requiring a local user to access the password database.