Description
Lawson Financials 8.0, when configured to use a third party relational database, stores usernames and passwords in a world-readable file, which allows local users to read the passwords and log onto the database.
References
- 20021202 Advisory: Lawson Financials RDBMS Insecurity mailing-list
- 6293 vdb-entry
- lawson-financials-insecure-authentication(10742) vdb-entry