CVE-2012-1923

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 38.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-04-17 · updated 2026-06-16
Weakness: CWE-310

Description

RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x store passwords in cleartext under adm_b_db\users\, which allows local users to obtain sensitive information by reading a database.

Affected products

RealNetworks Helix Mobile Server: 14.0.0, 14.0.1
RealNetworks Helix Server: 14.0.0, 14.0.1, 14.2, 14.2.0.212

References

http://archives.neohapsis.com/archives/bugtraq/2012-04/0062.html
http://helixproducts.real.com/docs/security/SecurityUpdate04022012HS.pdf
http://secunia.com/secunia_research/2012-8/
http://www.securityfocus.com/bid/52929
http://www.securitytracker.com/id?1026898
https://exchange.xforce.ibmcloud.com/vulnerabilities/74673
http://archives.neohapsis.com/archives/bugtraq/2012-04/0062.html
http://helixproducts.real.com/docs/security/SecurityUpdate04022012HS.pdf
http://secunia.com/secunia_research/2012-8/
http://www.securityfocus.com/bid/52929
http://www.securitytracker.com/id?1026898
https://exchange.xforce.ibmcloud.com/vulnerabilities/74673

Get alerted when CVE-2012-1923 or the next vulnerability affects your stack