CVE-2024-1346

Weak MySQL database root password in LaborOfficeFree

Weak MySQL database root password in LaborOfficeFree affects version 19.10. This vulnerability allows an attacker to calculate the root password of the MySQL database used by LaborOfficeFree using two constants.

Affected

LaborOfficeFree

CVSS v3.1 NVD

5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CVSS v3.1 INCIBE

6.8 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

EPSS

0.39% chance of exploitation in the next 30 days, 32nd percentile

Published

2024-02-19

Updated

2024-08-28

Proof-of-concept exploits (1)

• PeterGabaldon/CVE-2024-13462★ · 2024-02-25

Security advisories

• https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-laborofficefr…

References

• CVE Record
• NVD entry

Related

• CVE-2024-7479
• CVE-2024-7481
• CVE-2025-40677