CVE-2024-1346

Summary

CVE-2024-1346 is a newly disclosed vulnerability affecting the LaborOfficeFree software version 19.10. The weakness lies in the use of a weak MySQL database root password. An attacker can exploit this vulnerability by calculating the root password using two constants, gaining unauthorized access to the MySQL database. This issue poses a significant risk as the root user typically holds administrative privileges, allowing an attacker to perform various malicious activities. To mitigate this risk, it is recommended that users update to the latest version of LaborOfficeFree or configure their databases with strong, unique passwords.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.