CVE-2014-8347

CVE-2014-8347 describes an authentication bypass in the MatchPasswordData function of DBEngine.dll used by FileMaker Pro 13.0v3 and FileMaker Pro Advanced 12.0v4. A local attacker could leverage this to gain elevated privileges, effectively bypassing login and obtaining higher access within the l...

Filemaker Login Bypass / Privilege Escalation

Filemaker Login Bypass and Privilege Escalation ======================================================================= ADVISORY INFORMATION Title: Filemaker Login Bypass and Privilege Escalation Discovery date: 19/10/2014 Release date: 19/10/2014 Vendor Homepage: www.filemaker.com Version:...

Filemaker Login Bypass and Privilege Escalation Vulnerability

Filemaker Login Bypass and Privilege Escalation ======================================================================= ADVISORY INFORMATION Title: Filemaker Login Bypass and Privilege Escalation Discovery date: 19/10/2014 Release date: 19/10/2014 Vendor Homepage: www.filemaker.com Version:...