CWE Code: 16
Vulnerability Type: privilege_escalation
CVSS Score: 10.0
CWE Name:  Configuration
Summary: the default configuration of tekradius 3.0 uses the sa account to communicate with microsoft sql server, which makes it easier for remote attackers to obtain privileged access to the database and the underlying windows operating system.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2009-07-07
Last Modified Date: 2018-10-10