amswoes.wordpress.com
https://amswoes.wordpress.com/2017/06/06/cve-2017-7314-dump-personify-database-schema-33 CVE-2017-7314
HIGH
Personify360 7.5.2/7.6.1 - Improper Database Schema Access Restrictions
Record summary
CVE-2017-7314 has a selected CVSS score of 7.5 (high); EIP currently links 1 catalogued exploit.
Description
An issue was discovered in Personify360 e-Business 7.5.2 through 7.6.1. When going to the /TabId/275 URI, while creating a new role, a list of database tables and their columns is available.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBPersonify360 7.5.2/7.6.1 - Improper Database Schema Access RestrictionsExploitDB exploitby Pesach ZirkindNot analyzed1 file
References
2nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2017-7314