Threats tagged 'ghsa-4r68-7rg9-v6jj'

Jumis (formerly Tildes Jumis) creates a Microsoft SQL Server login named ##Tilde_JumisAdmin## with a password deterministically derived from the SQL Server name, which is publicly discoverable. This login is part of the sysadmin role, granting full administrative access to the SQL Server instance and all hosted accounting databases. The server also enables xp_cmdshell, allowing attackers with sysadmin access to execute operating system commands. This vulnerability allows any party able to reach the Jumis SQL Server to compute the admin password offline and gain full control without prior authentication.