« Volver al listado

CVE-2008-7207

Estado: ModificadaBaja (2.1)—

RivetTracker before 1.0 stores passwords in cleartext in config.php, which allows local users to discover passwords by reading config.php.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Rivetcode — Rivettracker

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2008-7207",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 2.1,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2009-09-11T16:30:00.327",
  "references": [
    {
      "url": "http://osvdb.org/42433",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.rivetcode.com/files/rivettracker/rivettracker_1-0.zip",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/42433",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.rivetcode.com/files/rivettracker/rivettracker_1-0.zip",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-310"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "RivetTracker before 1.0 stores passwords in cleartext in config.php, which allows local users to discover passwords by reading config.php."
    },
    {
      "lang": "es",
      "value": "RivetTracker anteriores a la v1.0 almacena contraseñas en texto claro en config.php, lo que permite a usuarios locales ver las contraseñas, leyendo el ficheros config.php."
    }
  ],
  "lastModified": "2026-06-16T23:03:49.533",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:rivetcode:rivettracker:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "96399C4D-FD42-4CEB-9F5E-460FDFB83345",
              "versionEndIncluding": "0.8"
            },
            {
              "criteria": "cpe:2.3:a:rivetcode:rivettracker:0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "89D97FC7-C0B5-4462-B9A3-1D3BB56925CD"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}