CVE-2019-3947

2019-06-1214:06:57

tenable

www.cve.org

9.6 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.5%

JSON

Fuji Electric V-Server before 6.0.33.0 stores database credentials in project files as plaintext. An attacker that can gain access to the project file can recover the database credentials and gain access to the database server.

CNA Affected

[
  {
    "product": "Fuji Electric V-Server",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Versions prior to 6.0.33.0"
      }
    ]
  }
]

References

www.securityfocus.com/bid/108740

www.tenable.com/security/research/tra-2019-27