Studiometry



  1. Studiometry Alternative
  2. Studiometry Software
  3. Studiometry 16
Studiometry cloud login

Studiometry for Mac provides a complete platform for managing a business. Whether you're a freelancer or a manager in an organization, this software will provide you with the tools needed to. Studiometry is a management and invoicing tool that tries to cover all aspects related to work, specially designed for self-employed people. The basis of the program is its project manager. Studiometry Touch is the full fledged companion to the award winning client/project management tool Studiometry for Mac and PC. Studiometry Touch lets you track your clients, projects, hours, expenses, and more and helps you create beautiful invoices while on the go. We're very excited about the freedom that Studiometry Touch will give to our.

ProductStudiometry
SeverityHigh
CVE ReferenceN/A
TypeInsecure Password Storage

Studiometry is a project and client management tool that is directed at small business. The tool comes in several forms with both a Windows and Mac OSX implementation. Additionally, cloud services are provided as well as an iOS mobile application. The Windows version of the application was tested but the advisory could affect the iOS and Mac OSX implementations. The configuration was that of a self-administered Studiometry server that a small business would be likely to use.

It was discovered that Studiometry stores user account passwords in encoded base64 format on both the server and its clients.

An attacker that has obtained access to a Studiometry database stored either on the server or one of its clients could easily decode all the users’ passwords for the application.

Insecure design and database management.

Studiometry

Update to Studiometry 12.6.1.

Please refer to the attached advisory above.

Studiometry Alternative

Studiometry software

Studiometry Software

Studiometry

http://oranged.net/studiometry/versionhistory/

Cloud

Studiometry 16

DateSummary
11 Jul 2016Issue reported to vendor
11 Jul 2016Response received from vendor
13 Jul 2016Vendor provided beta with patches for testing. Vulnerability verified as fixed in beta.
14 Jul 2016Vendor notified MWR that an official patch would be released 2016-07-25.
25 Jul 2016Oranged Software released official patched version 12.6.1 of Studiometry