title: Weak MySQL database root password in LaborOfficeFree
description: Weak MySQL database root password in LaborOfficeFree affects version 19.10. This vulnerability allows an attacker to calculate the root password of the MySQL database used by LaborOfficeFree using two constants.
problem types: CWE-521 Weak Password Requirements
affected:
{
defaultStatus: unaffected
product: LaborOfficeFree
vendor: LaborOfficeFree
versions:
status: affected, version: 19.10
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 6.8
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
version: 3.1
]
format: CVSS
scenarios: GENERAL