Description
Aenovo products (1) aeNovo, (2) aeNovoShop, and (3) aeNovoWYSI store password information in plaintext in the (a) control, (b) content, and (c) page tables, which allows attackers with database access to obtain those passwords and gain privileges.
References
- 17117 third-party-advisory
- 20051007 Aenovo Multiple Vulnerabilities mailing-list
- aenovo-password-information-disclosure(22549) vdb-entry
- http://www.kapda.ir/advisory-78.html
- 19939 vdb-entry