Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2024-1344

Encrypted database credentials in LaborOfficeFree

Description

Encrypted database credentials in LaborOfficeFree affecting version 19.10. This vulnerability allows an attacker to read and extract the username and password from the database of 'LOF_service.exe' and 'LaborOfficeFree.exe' located in the '%programfiles(x86)%\LaborOfficeFree\' directory. This user can log in remotely and has root-like privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

LaborOfficeFree LaborOfficeFree

Default version status: unaffected

  • 19.10 affected

References