Ecava IntegraXor before 4.1.4393 allows remote attackers to read cleartext credentials for administrative accounts via SELECT statements that leverage the guest role.

The version of Ecava IntegraXor installed on the remote host is a version prior to 4.2 Build 4458. It is, therefore, affected by multiple vulnerabilities :

  - A flaw related to IntegraXor's privilege management     allows the unprivileged guest user account to execute     arbitrary SQL statements and potentially upload     malicious files. (CVE-2014-0786)

  - A flaw in the way that IntegraXor exports report files     allows a remote, unauthenticated attacker to read and     write any file or cause a denial of service by writing     extremely large files. (CVE-2014-2375)

  - A SQL injection flaw allows a remote attacker to modify     and read database entries that are normally restricted,     including configuration entries. (CVE-2014-2376)

  - A flaw exists in IntegraXor's built-in application tags     that discloses path name information, which can be used     in conjunction with other vulnerabilities to increase     the likelihood of a successful attack. (CVE-2014-2377)

Ecava IntegraXor versions prior to 4.2.4458 contain multiple vulnerabilities:

- IntegraXor contains a security bypass vulnerability that allows the guest user to execute SQL SELECT queries and upload potentially malicious files. (CVE-2014-0786)

- IntegraXor allows remote attackers to read or write arbitrary files, obtain sensitive information or cause a denial of service (disk consumption) via the CSV export feature.  (CVE-2014-2375)

- IntegraXor contains an SQL injection vulnerability that an attacker could use to read arbitrary files from the server, connect to other SQL databases, and read data from tables that are normally restricted.  An attacker could cause a denial of service by using specially crafted SQL queries or could manipulate data within the tables.  (CVE-2014-2376)

-  IntegraXor uses built-in application tags. These application tags disclose information that could be used to identify full path names of files, which can be leveraged with the SQL injection vulnerability.  (CVE-2014-2377)

The version of Ecava IntegraXor installed on the remote host is a version prior to 4.1 Build 4410. It is, therefore, affected by an unspecified information disclosure vulnerability.

ID	Name	Product	Family	Type	Severity
77964	Ecava IntegraXor < 4.2.4458 Multiple Vulnerabilities	Nessus	SCADA	Local	high
8400	Ecava IntegraXor < 4.2.4458 Multiple Vulnerabilities	Nessus Network Monitor	SCADA		high
73303	Ecava IntegraXor < 4.1.4410 Information Disclosure	Nessus	SCADA	Local	medium

Detections

Analytics

CVE-2014-0786

high

Tenable Plugins

high

high

medium