CVE-2013-2562: Low severity Mambo-foundation Mambo Cms vulnerability
Published Jun 9, 2014
·Updated
Mambo CMS 4.6.5 stores the MySQL database password in cleartext in the document root, which allows local users to obtain sensitive information via unspecified vectors.
Affected Software
1 affected component
Mambo-foundation Mambo Cms=4.6.5
Event History
Jun 9, 2014
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Data Sourced
via NVD·07:55 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2013-2562?
CVE-2013-2562 is considered a high severity vulnerability due to the risk of exposing sensitive database credentials.
2
How do I fix CVE-2013-2562?
To fix CVE-2013-2562, you should relocate the configuration file that contains the MySQL database password to a non-accessible directory from the web root.
3
Who is affected by CVE-2013-2562?
CVE-2013-2562 affects users of Mambo CMS version 4.6.5.
4
What type of information does CVE-2013-2562 expose?
CVE-2013-2562 exposes the MySQL database password in cleartext, which can lead to unauthorized access to the database.
5
Are there any known exploits for CVE-2013-2562?
Yes, CVE-2013-2562 can be exploited by local users who have access to the document root of the Mambo CMS installation.