CVE-2024-1346 - CVE House
Back to Database
Status published Medium CVE-2024-1346

Weak MySQL database root password in LaborOfficeFree

Vulnerability Description

Weak MySQL database root password in LaborOfficeFree affects version 19.10. This vulnerability allows an attacker to calculate the root password of the MySQL database used by LaborOfficeFree using two constants.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-1346

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Pedro Gabaldón Juliá
  • Javier Medina Munuera
  • Antonio José Gálvez Sánchez
  • Alejandro Baño Andrés

References

More from LaborOfficeFree

View All →
CVE-2024-1345
Weak MySQL database root password in LaborOfficeFree
Medium 6.8
CVE-2024-1344
Encrypted database credentials in LaborOfficeFree
Medium 6.8
CVE-2024-1343
Weak permission vulnerability in LaborOfficeFree
Medium 4.7

Affected Vendor

LaborOfficeFree

View all reports →

Affected Software

LaborOfficeFree
Vulnerable Versions:
19.10

Timeline

Official Publish: February 19th, 2024
Last Modified: August 28th, 2024
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Weaknesses (CWE)

CWE-521

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.