VULNERABILITY INTELLIGENCE
CVE-2024-1346
CVSS score6.8 MEDIUM
EPSS probability0.39%
CISA KEVNot currently listed
Published2024-02-19
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Description
Weak MySQL database root password in LaborOfficeFree affects version 19.10. This vulnerability allows an attacker to calculate the root password of the MySQL database used by LaborOfficeFree using two constants.
Weakness classification
- cve-coordination@incibe.es: CWE-521
Primary references
- cve-coordination@incibe.es — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory