|
TowerBlog User Credential Exposure Weakness
TowerBlog is reported prone to a weakness that may allow remote attackers to disclose user credentials. It is reported that user password hashes are stored in a file that resides in the Web root allowing arbitrary attackers to access and disclose the sensitive information. An attacker may then carry out brute force attacks against the password hashes to ultimately disclose user credentials. This may lead to other attacks against the system and potentially allow the attacker to compromise an affected computer. TowerBlog 0.6 is reported to be affected. Other versions may be affected as well. |
|
 Privacy Statement |
