Description
AdventNet EventLog Analyzer build 4030 for Windows, and possibly other versions and platforms, installs a mysql instance with a default "root" account without a password, which allows remote attackers to gain privileges and modify logs. Fixed in EventLog Analyzer Build 6000.
References
- 42423 vdb-entry
- http://forums.adventnet.com/viewtopic.php?t=247521
- 26304 vdb-entry
- 27833 third-party-advisory