CVE-2016-5683
HighSummary
ReadyDesk 9.1 allows local users to obtain cleartext SQL Server credentials by reading the SQL_Config.aspx file and decrypting data with a hardcoded key in the ReadyDesk.dll file.
Risk Assessment
The risk associated with this vulnerability is the potential for unauthorized access to database credentials, which could lead to data leakage or manipulation.
Recommendation
It is recommended to secure the SQL_Config.aspx file and review and update the encryption mechanisms in ReadyDesk to prevent access to sensitive data.
Other vulnerabilities in ReadyDesk 9.1
See all- CVE-2016-5049High
Directory traversal vulnerability in chat/openattach.aspx in ReadyDesk 9.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the SESID parameter in conjunction with a filename in the FNAME parameter.
- CVE-2016-5050Critical
ReadyDesk 9.1 has an unrestricted file upload vulnerability in chat/sendfile.aspx that allows remote attackers to execute arbitrary code by uploading and requesting a .aspx file.
- CVE-2016-5048Critical
ReadyDesk 9.1 has an SQL injection vulnerability in chat/staff/default.aspx that allows remote attackers to execute arbitrary SQL commands via the user name field.
Original NVD description (English source)
ReadyDesk 9.1 allows local users to determine cleartext SQL Server credentials by reading the SQL_Config.aspx file and decrypting data with a hardcoded key in the ReadyDesk.dll file.