Description
Multiple Finka programs use hard-coded Firebird database credentials (shared across all instances of this software). A malicious attacker in local network who knows default credentials is able to read and edit database content. This vulnerability has been fixed in version: Finka-FK 18.5, Finka-KPR 16.6, Finka-Płace 13.4, Finka-Faktura 18.3, Finka-Magazyn 8.3, Finka-STW 12.3
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
TIK-SOFT Finka-FK
Default version status: unaffected
0 to < 18.5affected
TIK-SOFT Finka-KPR
Default version status: unaffected
0 to < 16.6affected
TIK-SOFT Finka-Płace
Default version status: unaffected
0 to < 13.4affected
TIK-SOFT Finka-Faktura
Default version status: unaffected
0 to < 18.3affected
TIK-SOFT Finka-Magazyn
Default version status: unaffected
0 to < 8.3affected
TIK-SOFT Finka-STW
Default version status: unaffected
0 to < 12.3affected