Information disclosure in Ecava Integraxor

CVE-2014-0786

Ecava IntegraXor before 4.1.4393 allows remote attackers to read cleartext credentials for administrative accounts via SELECT statements that leverage the guest role.

Vulnerability class: Information Disclosure

EPSS: 0.019 (83.5th percentile) — read the EPSS interpretation.