CVE-2014-3419

2014-07-1514:55:00

CWE-255

[email protected]

web.nvd.nist.gov

infoblox netmri

6.8.5

default password

mysql

root

vulnerability

cve-2014-3419

nvd

6.4 Medium

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.2%

JSON

Infoblox NetMRI before 6.8.5 has a default password of admin for the “root” MySQL database account, which makes it easier for local users to obtain access via unspecified vectors.

CPENameOperatorVersion
infoblox:netmriinfoblox netmrieq6.8.2.11
infoblox:netmriinfoblox netmrieq6.1.2
infoblox:netmriinfoblox netmrieq6.2.1
infoblox:netmriinfoblox netmrieq6.0.2.42
infoblox:netmriinfoblox netmrile6.8.4
infoblox:netmriinfoblox netmrieq6.2.1.48

CPE	Name	Operator	Version
infoblox:netmri	infoblox netmri	eq	6.8.2.11
infoblox:netmri	infoblox netmri	eq	6.1.2
infoblox:netmri	infoblox netmri	eq	6.2.1
infoblox:netmri	infoblox netmri	eq	6.0.2.42
infoblox:netmri	infoblox netmri	le	6.8.4
infoblox:netmri	infoblox netmri	eq	6.2.1.48