Eaton Foreseer Reporting Software Database Connection String Vulnerability Allowing Unauthorized Access to 4crXref Database

A vulnerability exists in Eaton Foreseer Reporting Software (FRS) versions prior to 1.5.100) that exposes the connection string for the FRSCore database. Users with access to this database can leverage the exposed connection string to gain administrative access to the 4crXref database.

Impact

Exploitation of this vulnerability allows for unauthorized administrative access to the 4crXref database.

Remediation

Users are advised to update to Eaton Foreseer Reporting Software version 1.5.100 or later.