CVE-2013-6223
Severity CVSS v4.0:
Pending analysis
Type:
CWE-255
Credentials Management
Publication date:
09/06/2014
Last modified:
12/04/2025
Description
LiveZilla before 5.1.1.0 stores the admin Base64 encoded username and password in a 1click file, which allows local users to obtain access by reading the file.
Impact
Base Score 2.0
2.10
Severity 2.0
LOW
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:livezilla:livezilla:*:*:*:*:*:*:*:* | 5.1.0.0 (including) | |
cpe:2.3:a:livezilla:livezilla:3.1.8.3:*:*:*:*:*:*:* | ||
cpe:2.3:a:livezilla:livezilla:3.2.0.2:*:*:*:*:*:*:* | ||
cpe:2.3:a:livezilla:livezilla:4.0.1.0:*:*:*:*:*:*:* | ||
cpe:2.3:a:livezilla:livezilla:4.0.1.1:*:*:*:*:*:*:* | ||
cpe:2.3:a:livezilla:livezilla:4.0.1.2:*:*:*:*:*:*:* | ||
cpe:2.3:a:livezilla:livezilla:4.1.0.3:*:*:*:*:*:*:* | ||
cpe:2.3:a:livezilla:livezilla:4.1.0.4:*:*:*:*:*:*:* | ||
cpe:2.3:a:livezilla:livezilla:4.2.0.4:*:*:*:*:*:*:* | ||
cpe:2.3:a:livezilla:livezilla:4.2.0.5:*:*:*:*:*:*:* | ||
cpe:2.3:a:livezilla:livezilla:5.0.1.0:*:*:*:*:*:*:* | ||
cpe:2.3:a:livezilla:livezilla:5.0.1.1:*:*:*:*:*:*:* | ||
cpe:2.3:a:livezilla:livezilla:5.0.1.2:*:*:*:*:*:*:* | ||
cpe:2.3:a:livezilla:livezilla:5.0.1.3:*:*:*:*:*:*:* | ||
cpe:2.3:a:livezilla:livezilla:5.0.1.4:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://blog.curesec.com/article/blog/27.html
- http://forums.livezilla.net/index.php?%2Ftopic%2F163-livezilla-changelog%2F=
- http://osvdb.org/100400
- http://seclists.org/fulldisclosure/2013/Nov/210
- http://blog.curesec.com/article/blog/27.html
- http://forums.livezilla.net/index.php?%2Ftopic%2F163-livezilla-changelog%2F=
- http://osvdb.org/100400
- http://seclists.org/fulldisclosure/2013/Nov/210