What’s Vulnerable › Vulnerabilities

CVE-2024-1346: Weak MySQL database root password in LaborOfficeFree

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-02-19 · updated 2026-06-17
• Weakness: CWE-521

Description

Weak MySQL database root password in LaborOfficeFree affects version 19.10. This vulnerability allows an attacker to calculate the root password of the MySQL database used by LaborOfficeFree using two constants.

Affected products

• LaborOfficeFree: 19.10

References

• https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-laborofficefree
• https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-laborofficefree

Get alerted when CVE-2024-1346 or the next vulnerability affects your stack